projects / deliverable / linux.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
mac80211: validate SIOCSIWPOWER arguments better
[deliverable/linux.git] / net / mac80211 / mlme.c
CommitLineData
f0706e82
JB		 1/*
2 * BSS client mode implementation
3 * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi>
4 * Copyright 2004, Instant802 Networks, Inc.
5 * Copyright 2005, Devicescape Software, Inc.
6 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
7 * Copyright 2007, Michael Wu <flamingice@sourmilk.net>
8 *
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License version 2 as
11 * published by the Free Software Foundation.
12 */
13
5b323edb 14#include <linux/delay.h>
f0706e82
JB		 15#include <linux/if_ether.h>
16#include <linux/skbuff.h>
f0706e82
JB		 17#include <linux/if_arp.h>
18#include <linux/wireless.h>
19#include <linux/random.h>
20#include <linux/etherdevice.h>
d0709a65 21#include <linux/rtnetlink.h>
f0706e82 22#include <net/iw_handler.h>
f0706e82 23#include <net/mac80211.h>
472dbc45 24#include <asm/unaligned.h>
60f8b39c 25
f0706e82 26#include "ieee80211_i.h"
2c8dccc7
JB		 27#include "rate.h"
28#include "led.h"
f0706e82 29
6042a3e3 30#define IEEE80211_ASSOC_SCANS_MAX_TRIES 2
f0706e82
JB		 31#define IEEE80211_AUTH_TIMEOUT (HZ / 5)
32#define IEEE80211_AUTH_MAX_TRIES 3
33#define IEEE80211_ASSOC_TIMEOUT (HZ / 5)
34#define IEEE80211_ASSOC_MAX_TRIES 3
35#define IEEE80211_MONITORING_INTERVAL (2 * HZ)
36#define IEEE80211_PROBE_INTERVAL (60 * HZ)
37#define IEEE80211_RETRY_AUTH_INTERVAL (1 * HZ)
38#define IEEE80211_SCAN_INTERVAL (2 * HZ)
39#define IEEE80211_SCAN_INTERVAL_SLOW (15 * HZ)
872ba533 40#define IEEE80211_IBSS_JOIN_TIMEOUT (7 * HZ)
f0706e82 41
f0706e82
JB		 42#define IEEE80211_IBSS_MERGE_INTERVAL (30 * HZ)
43#define IEEE80211_IBSS_INACTIVITY_LIMIT (60 * HZ)
44
45#define IEEE80211_IBSS_MAX_STA_ENTRIES 128
46
47
5484e237
JB		 48/* utils */
49static int ecw2cw(int ecw)
60f8b39c 50{
5484e237 51 return (1 << ecw) - 1;
60f8b39c
JB		 52}
53
c2b13452 54static u8 *ieee80211_bss_get_ie(struct ieee80211_bss *bss, u8 ie)
43ac2ca3
JM		 55{
56 u8 *end, *pos;
57
58 pos = bss->ies;
59 if (pos == NULL)
60 return NULL;
61 end = pos + bss->ies_len;
62
63 while (pos + 1 < end) {
64 if (pos + 2 + pos[1] > end)
65 break;
66 if (pos[0] == ie)
67 return pos;
68 pos += 2 + pos[1];
69 }
70
71 return NULL;
72}
73
c2b13452 74static int ieee80211_compatible_rates(struct ieee80211_bss *bss,
9ac19a90
JB		 75 struct ieee80211_supported_band *sband,
76 u64 *rates)
77{
78 int i, j, count;
79 *rates = 0;
80 count = 0;
81 for (i = 0; i < bss->supp_rates_len; i++) {
82 int rate = (bss->supp_rates[i] & 0x7F) * 5;
83
84 for (j = 0; j < sband->n_bitrates; j++)
85 if (sband->bitrates[j].bitrate == rate) {
86 *rates |= BIT(j);
87 count++;
88 break;
89 }
90 }
91
92 return count;
93}
94
9c6bd790
JB		 95/* also used by mesh code */
96u64 ieee80211_sta_get_rates(struct ieee80211_local *local,
97 struct ieee802_11_elems *elems,
98 enum ieee80211_band band)
60f8b39c 99{
9c6bd790
JB		 100 struct ieee80211_supported_band *sband;
101 struct ieee80211_rate *bitrates;
102 size_t num_rates;
103 u64 supp_rates;
104 int i, j;
105 sband = local->hw.wiphy->bands[band];
60f8b39c 106
9c6bd790
JB		 107 if (!sband) {
108 WARN_ON(1);
109 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
60f8b39c 110 }
60f8b39c 111
9c6bd790
JB		 112 bitrates = sband->bitrates;
113 num_rates = sband->n_bitrates;
114 supp_rates = 0;
115 for (i = 0; i < elems->supp_rates_len +
116 elems->ext_supp_rates_len; i++) {
117 u8 rate = 0;
118 int own_rate;
119 if (i < elems->supp_rates_len)
120 rate = elems->supp_rates[i];
121 else if (elems->ext_supp_rates)
122 rate = elems->ext_supp_rates
123 [i - elems->supp_rates_len];
124 own_rate = 5 * (rate & 0x7f);
125 for (j = 0; j < num_rates; j++)
126 if (bitrates[j].bitrate == own_rate)
127 supp_rates |= BIT(j);
128 }
129 return supp_rates;
60f8b39c
JB		 130}
131
9c6bd790
JB		 132/* frame sending functions */
133
134/* also used by scanning code */
0a51b27e
JB		 135void ieee80211_send_probe_req(struct ieee80211_sub_if_data *sdata, u8 *dst,
136 u8 *ssid, size_t ssid_len)
60f8b39c
JB		 137{
138 struct ieee80211_local *local = sdata->local;
139 struct ieee80211_supported_band *sband;
140 struct sk_buff *skb;
141 struct ieee80211_mgmt *mgmt;
142 u8 *pos, *supp_rates, *esupp_rates = NULL;
143 int i;
144
145 skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt) + 200);
146 if (!skb) {
147 printk(KERN_DEBUG "%s: failed to allocate buffer for probe "
148 "request\n", sdata->dev->name);
149 return;
150 }
151 skb_reserve(skb, local->hw.extra_tx_headroom);
152
153 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
154 memset(mgmt, 0, 24);
155 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
156 IEEE80211_STYPE_PROBE_REQ);
157 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
158 if (dst) {
159 memcpy(mgmt->da, dst, ETH_ALEN);
160 memcpy(mgmt->bssid, dst, ETH_ALEN);
161 } else {
162 memset(mgmt->da, 0xff, ETH_ALEN);
163 memset(mgmt->bssid, 0xff, ETH_ALEN);
164 }
165 pos = skb_put(skb, 2 + ssid_len);
166 *pos++ = WLAN_EID_SSID;
167 *pos++ = ssid_len;
168 memcpy(pos, ssid, ssid_len);
169
170 supp_rates = skb_put(skb, 2);
171 supp_rates[0] = WLAN_EID_SUPP_RATES;
172 supp_rates[1] = 0;
173 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
174
175 for (i = 0; i < sband->n_bitrates; i++) {
176 struct ieee80211_rate *rate = &sband->bitrates[i];
177 if (esupp_rates) {
178 pos = skb_put(skb, 1);
179 esupp_rates[1]++;
180 } else if (supp_rates[1] == 8) {
181 esupp_rates = skb_put(skb, 3);
182 esupp_rates[0] = WLAN_EID_EXT_SUPP_RATES;
183 esupp_rates[1] = 1;
184 pos = &esupp_rates[2];
185 } else {
186 pos = skb_put(skb, 1);
187 supp_rates[1]++;
188 }
189 *pos = rate->bitrate / 5;
190 }
191
e50db65c 192 ieee80211_tx_skb(sdata, skb, 0);
60f8b39c
JB		 193}
194
9c6bd790
JB		 195static void ieee80211_send_auth(struct ieee80211_sub_if_data *sdata,
196 struct ieee80211_if_sta *ifsta,
197 int transaction, u8 *extra, size_t extra_len,
198 int encrypt)
199{
200 struct ieee80211_local *local = sdata->local;
201 struct sk_buff *skb;
202 struct ieee80211_mgmt *mgmt;
203
204 skb = dev_alloc_skb(local->hw.extra_tx_headroom +
205 sizeof(*mgmt) + 6 + extra_len);
206 if (!skb) {
207 printk(KERN_DEBUG "%s: failed to allocate buffer for auth "
208 "frame\n", sdata->dev->name);
209 return;
210 }
211 skb_reserve(skb, local->hw.extra_tx_headroom);
212
213 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24 + 6);
214 memset(mgmt, 0, 24 + 6);
215 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
216 IEEE80211_STYPE_AUTH);
217 if (encrypt)
218 mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
219 memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
220 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
221 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
222 mgmt->u.auth.auth_alg = cpu_to_le16(ifsta->auth_alg);
223 mgmt->u.auth.auth_transaction = cpu_to_le16(transaction);
224 ifsta->auth_transaction = transaction + 1;
225 mgmt->u.auth.status_code = cpu_to_le16(0);
226 if (extra)
227 memcpy(skb_put(skb, extra_len), extra, extra_len);
228
229 ieee80211_tx_skb(sdata, skb, encrypt);
230}
231
9ac19a90
JB		 232static void ieee80211_send_assoc(struct ieee80211_sub_if_data *sdata,
233 struct ieee80211_if_sta *ifsta)
234{
235 struct ieee80211_local *local = sdata->local;
236 struct sk_buff *skb;
237 struct ieee80211_mgmt *mgmt;
d9fe60de 238 u8 *pos, *ies, *ht_ie;
9ac19a90
JB		 239 int i, len, count, rates_len, supp_rates_len;
240 u16 capab;
c2b13452 241 struct ieee80211_bss *bss;
9ac19a90
JB		 242 int wmm = 0;
243 struct ieee80211_supported_band *sband;
244 u64 rates = 0;
245
246 skb = dev_alloc_skb(local->hw.extra_tx_headroom +
247 sizeof(*mgmt) + 200 + ifsta->extra_ie_len +
248 ifsta->ssid_len);
249 if (!skb) {
250 printk(KERN_DEBUG "%s: failed to allocate buffer for assoc "
251 "frame\n", sdata->dev->name);
252 return;
253 }
254 skb_reserve(skb, local->hw.extra_tx_headroom);
255
256 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
257
258 capab = ifsta->capab;
259
260 if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ) {
261 if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_SLOT_INCAPABLE))
262 capab |= WLAN_CAPABILITY_SHORT_SLOT_TIME;
263 if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_PREAMBLE_INCAPABLE))
264 capab |= WLAN_CAPABILITY_SHORT_PREAMBLE;
265 }
266
267 bss = ieee80211_rx_bss_get(local, ifsta->bssid,
268 local->hw.conf.channel->center_freq,
269 ifsta->ssid, ifsta->ssid_len);
270 if (bss) {
271 if (bss->capability & WLAN_CAPABILITY_PRIVACY)
272 capab |= WLAN_CAPABILITY_PRIVACY;
273 if (bss->wmm_used)
274 wmm = 1;
275
276 /* get all rates supported by the device and the AP as
277 * some APs don't like getting a superset of their rates
278 * in the association request (e.g. D-Link DAP 1353 in
279 * b-only mode) */
280 rates_len = ieee80211_compatible_rates(bss, sband, &rates);
281
282 if ((bss->capability & WLAN_CAPABILITY_SPECTRUM_MGMT) &&
283 (local->hw.flags & IEEE80211_HW_SPECTRUM_MGMT))
284 capab |= WLAN_CAPABILITY_SPECTRUM_MGMT;
285
286 ieee80211_rx_bss_put(local, bss);
287 } else {
288 rates = ~0;
289 rates_len = sband->n_bitrates;
290 }
291
292 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
293 memset(mgmt, 0, 24);
294 memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
295 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
296 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
297
298 if (ifsta->flags & IEEE80211_STA_PREV_BSSID_SET) {
299 skb_put(skb, 10);
300 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
301 IEEE80211_STYPE_REASSOC_REQ);
302 mgmt->u.reassoc_req.capab_info = cpu_to_le16(capab);
303 mgmt->u.reassoc_req.listen_interval =
304 cpu_to_le16(local->hw.conf.listen_interval);
305 memcpy(mgmt->u.reassoc_req.current_ap, ifsta->prev_bssid,
306 ETH_ALEN);
307 } else {
308 skb_put(skb, 4);
309 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
310 IEEE80211_STYPE_ASSOC_REQ);
311 mgmt->u.assoc_req.capab_info = cpu_to_le16(capab);
13554121 312 mgmt->u.assoc_req.listen_interval =
9ac19a90
JB		 313 cpu_to_le16(local->hw.conf.listen_interval);
314 }
315
316 /* SSID */
317 ies = pos = skb_put(skb, 2 + ifsta->ssid_len);
318 *pos++ = WLAN_EID_SSID;
319 *pos++ = ifsta->ssid_len;
320 memcpy(pos, ifsta->ssid, ifsta->ssid_len);
321
322 /* add all rates which were marked to be used above */
323 supp_rates_len = rates_len;
324 if (supp_rates_len > 8)
325 supp_rates_len = 8;
326
327 len = sband->n_bitrates;
328 pos = skb_put(skb, supp_rates_len + 2);
329 *pos++ = WLAN_EID_SUPP_RATES;
330 *pos++ = supp_rates_len;
331
332 count = 0;
333 for (i = 0; i < sband->n_bitrates; i++) {
334 if (BIT(i) & rates) {
335 int rate = sband->bitrates[i].bitrate;
336 *pos++ = (u8) (rate / 5);
337 if (++count == 8)
338 break;
339 }
340 }
341
342 if (rates_len > count) {
343 pos = skb_put(skb, rates_len - count + 2);
344 *pos++ = WLAN_EID_EXT_SUPP_RATES;
345 *pos++ = rates_len - count;
346
347 for (i++; i < sband->n_bitrates; i++) {
348 if (BIT(i) & rates) {
349 int rate = sband->bitrates[i].bitrate;
350 *pos++ = (u8) (rate / 5);
351 }
352 }
353 }
354
355 if (capab & WLAN_CAPABILITY_SPECTRUM_MGMT) {
356 /* 1. power capabilities */
357 pos = skb_put(skb, 4);
358 *pos++ = WLAN_EID_PWR_CAPABILITY;
359 *pos++ = 2;
360 *pos++ = 0; /* min tx power */
361 *pos++ = local->hw.conf.channel->max_power; /* max tx power */
362
363 /* 2. supported channels */
364 /* TODO: get this in reg domain format */
365 pos = skb_put(skb, 2 * sband->n_channels + 2);
366 *pos++ = WLAN_EID_SUPPORTED_CHANNELS;
367 *pos++ = 2 * sband->n_channels;
368 for (i = 0; i < sband->n_channels; i++) {
369 *pos++ = ieee80211_frequency_to_channel(
370 sband->channels[i].center_freq);
371 *pos++ = 1; /* one channel in the subband*/
372 }
373 }
374
375 if (ifsta->extra_ie) {
376 pos = skb_put(skb, ifsta->extra_ie_len);
377 memcpy(pos, ifsta->extra_ie, ifsta->extra_ie_len);
378 }
379
380 if (wmm && (ifsta->flags & IEEE80211_STA_WMM_ENABLED)) {
381 pos = skb_put(skb, 9);
382 *pos++ = WLAN_EID_VENDOR_SPECIFIC;
383 *pos++ = 7; /* len */
384 *pos++ = 0x00; /* Microsoft OUI 00:50:F2 */
385 *pos++ = 0x50;
386 *pos++ = 0xf2;
387 *pos++ = 2; /* WME */
388 *pos++ = 0; /* WME info */
389 *pos++ = 1; /* WME ver */
390 *pos++ = 0;
391 }
392
393 /* wmm support is a must to HT */
eb46936b
VT		 394 /*
395 * IEEE802.11n does not allow TKIP/WEP as pairwise
396 * ciphers in HT mode. We still associate in non-ht
397 * mode (11a/b/g) if any one of these ciphers is
398 * configured as pairwise.
399 */
9ac19a90 400 if (wmm && (ifsta->flags & IEEE80211_STA_WMM_ENABLED) &&
d9fe60de
JB		 401 sband->ht_cap.ht_supported &&
402 (ht_ie = ieee80211_bss_get_ie(bss, WLAN_EID_HT_INFORMATION)) &&
eb46936b
VT		 403 ht_ie[1] >= sizeof(struct ieee80211_ht_info) &&
404 (!(ifsta->flags & IEEE80211_STA_TKIP_WEP_USED))) {
d9fe60de
JB		 405 struct ieee80211_ht_info *ht_info =
406 (struct ieee80211_ht_info *)(ht_ie + 2);
407 u16 cap = sband->ht_cap.cap;
9ac19a90
JB		 408 __le16 tmp;
409 u32 flags = local->hw.conf.channel->flags;
410
d9fe60de
JB		 411 switch (ht_info->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET) {
412 case IEEE80211_HT_PARAM_CHA_SEC_ABOVE:
9ac19a90 413 if (flags & IEEE80211_CHAN_NO_FAT_ABOVE) {
d9fe60de 414 cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40;
9ac19a90
JB		 415 cap &= ~IEEE80211_HT_CAP_SGI_40;
416 }
417 break;
d9fe60de 418 case IEEE80211_HT_PARAM_CHA_SEC_BELOW:
9ac19a90 419 if (flags & IEEE80211_CHAN_NO_FAT_BELOW) {
d9fe60de 420 cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40;
9ac19a90
JB		 421 cap &= ~IEEE80211_HT_CAP_SGI_40;
422 }
423 break;
424 }
425
426 tmp = cpu_to_le16(cap);
427 pos = skb_put(skb, sizeof(struct ieee80211_ht_cap)+2);
428 *pos++ = WLAN_EID_HT_CAPABILITY;
429 *pos++ = sizeof(struct ieee80211_ht_cap);
430 memset(pos, 0, sizeof(struct ieee80211_ht_cap));
431 memcpy(pos, &tmp, sizeof(u16));
432 pos += sizeof(u16);
433 /* TODO: needs a define here for << 2 */
d9fe60de
JB		 434 *pos++ = sband->ht_cap.ampdu_factor |
435 (sband->ht_cap.ampdu_density << 2);
436 memcpy(pos, &sband->ht_cap.mcs, sizeof(sband->ht_cap.mcs));
9ac19a90
JB		 437 }
438
439 kfree(ifsta->assocreq_ies);
440 ifsta->assocreq_ies_len = (skb->data + skb->len) - ies;
441 ifsta->assocreq_ies = kmalloc(ifsta->assocreq_ies_len, GFP_KERNEL);
442 if (ifsta->assocreq_ies)
443 memcpy(ifsta->assocreq_ies, ies, ifsta->assocreq_ies_len);
444
e50db65c 445 ieee80211_tx_skb(sdata, skb, 0);
9ac19a90
JB		 446}
447
448
ef422bc0
JB		 449static void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata,
450 u16 stype, u16 reason)
9ac19a90
JB		 451{
452 struct ieee80211_local *local = sdata->local;
ef422bc0 453 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
9ac19a90
JB		 454 struct sk_buff *skb;
455 struct ieee80211_mgmt *mgmt;
456
457 skb = dev_alloc_skb(local->hw.extra_tx_headroom + sizeof(*mgmt));
458 if (!skb) {
ef422bc0
JB		 459 printk(KERN_DEBUG "%s: failed to allocate buffer for "
460 "deauth/disassoc frame\n", sdata->dev->name);
9ac19a90
JB		 461 return;
462 }
463 skb_reserve(skb, local->hw.extra_tx_headroom);
464
465 mgmt = (struct ieee80211_mgmt *) skb_put(skb, 24);
466 memset(mgmt, 0, 24);
467 memcpy(mgmt->da, ifsta->bssid, ETH_ALEN);
468 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
469 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
ef422bc0 470 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT | stype);
9ac19a90 471 skb_put(skb, 2);
ef422bc0 472 /* u.deauth.reason_code == u.disassoc.reason_code */
9ac19a90
JB		 473 mgmt->u.deauth.reason_code = cpu_to_le16(reason);
474
e50db65c 475 ieee80211_tx_skb(sdata, skb, 0);
9ac19a90
JB		 476}
477
60f8b39c 478/* MLME */
f698d856 479static void ieee80211_sta_def_wmm_params(struct ieee80211_sub_if_data *sdata,
c2b13452 480 struct ieee80211_bss *bss)
e2839d8f 481{
e2839d8f
VK		 482 struct ieee80211_local *local = sdata->local;
483 int i, have_higher_than_11mbit = 0;
484
e2839d8f
VK		 485 /* cf. IEEE 802.11 9.2.12 */
486 for (i = 0; i < bss->supp_rates_len; i++)
487 if ((bss->supp_rates[i] & 0x7f) * 5 > 110)
488 have_higher_than_11mbit = 1;
489
490 if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ &&
491 have_higher_than_11mbit)
492 sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE;
493 else
494 sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE;
495
3d35f7c6 496 ieee80211_set_wmm_default(sdata);
e2839d8f
VK		 497}
498
f698d856 499static void ieee80211_sta_wmm_params(struct ieee80211_local *local,
f0706e82
JB		 500 struct ieee80211_if_sta *ifsta,
501 u8 *wmm_param, size_t wmm_param_len)
502{
f0706e82
JB		 503 struct ieee80211_tx_queue_params params;
504 size_t left;
505 int count;
506 u8 *pos;
507
3434fbd3
JB		 508 if (!(ifsta->flags & IEEE80211_STA_WMM_ENABLED))
509 return;
510
511 if (!wmm_param)
512 return;
513
f0706e82
JB		 514 if (wmm_param_len < 8 || wmm_param[5] /* version */ != 1)
515 return;
516 count = wmm_param[6] & 0x0f;
517 if (count == ifsta->wmm_last_param_set)
518 return;
519 ifsta->wmm_last_param_set = count;
520
521 pos = wmm_param + 8;
522 left = wmm_param_len - 8;
523
524 memset(&params, 0, sizeof(params));
525
526 if (!local->ops->conf_tx)
527 return;
528
529 local->wmm_acm = 0;
530 for (; left >= 4; left -= 4, pos += 4) {
531 int aci = (pos[0] >> 5) & 0x03;
532 int acm = (pos[0] >> 4) & 0x01;
533 int queue;
534
535 switch (aci) {
536 case 1:
e100bb64 537 queue = 3;
988c0f72 538 if (acm)
f0706e82 539 local->wmm_acm |= BIT(0) | BIT(3);
f0706e82
JB		 540 break;
541 case 2:
e100bb64 542 queue = 1;
988c0f72 543 if (acm)
f0706e82 544 local->wmm_acm |= BIT(4) | BIT(5);
f0706e82
JB		 545 break;
546 case 3:
e100bb64 547 queue = 0;
988c0f72 548 if (acm)
f0706e82 549 local->wmm_acm |= BIT(6) | BIT(7);
f0706e82
JB		 550 break;
551 case 0:
552 default:
e100bb64 553 queue = 2;
988c0f72 554 if (acm)
f0706e82 555 local->wmm_acm |= BIT(1) | BIT(2);
f0706e82
JB		 556 break;
557 }
558
559 params.aifs = pos[0] & 0x0f;
560 params.cw_max = ecw2cw((pos[1] & 0xf0) >> 4);
561 params.cw_min = ecw2cw(pos[1] & 0x0f);
f434b2d1 562 params.txop = get_unaligned_le16(pos + 2);
f4ea83dd 563#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
f0706e82 564 printk(KERN_DEBUG "%s: WMM queue=%d aci=%d acm=%d aifs=%d "
3330d7be 565 "cWmin=%d cWmax=%d txop=%d\n",
f698d856 566 local->mdev->name, queue, aci, acm, params.aifs, params.cw_min,
3330d7be
JB		 567 params.cw_max, params.txop);
568#endif
f0706e82
JB		 569 /* TODO: handle ACM (block TX, fallback to next lowest allowed
570 * AC for now) */
571 if (local->ops->conf_tx(local_to_hw(local), queue, &params)) {
572 printk(KERN_DEBUG "%s: failed to set TX queue "
f698d856 573 "parameters for queue %d\n", local->mdev->name, queue);
f0706e82
JB		 574 }
575 }
576}
577
a97b77b9
VN		 578static bool check_tim(struct ieee802_11_elems *elems, u16 aid, bool *is_mc)
579{
580 u8 mask;
581 u8 index, indexn1, indexn2;
582 struct ieee80211_tim_ie *tim = (struct ieee80211_tim_ie *) elems->tim;
583
584 aid &= 0x3fff;
585 index = aid / 8;
586 mask = 1 << (aid & 7);
587
588 if (tim->bitmap_ctrl & 0x01)
589 *is_mc = true;
590
591 indexn1 = tim->bitmap_ctrl & 0xfe;
592 indexn2 = elems->tim_len + indexn1 - 4;
593
594 if (index < indexn1 || index > indexn2)
595 return false;
596
597 index -= indexn1;
598
599 return !!(tim->virtual_map[index] & mask);
600}
601
7a5158ef
JB		 602static u32 ieee80211_handle_bss_capability(struct ieee80211_sub_if_data *sdata,
603 u16 capab, bool erp_valid, u8 erp)
5628221c 604{
bda3933a 605 struct ieee80211_bss_conf *bss_conf = &sdata->vif.bss_conf;
ebd74487 606#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
5628221c 607 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
ebd74487 608#endif
471b3efd 609 u32 changed = 0;
7a5158ef
JB		 610 bool use_protection;
611 bool use_short_preamble;
612 bool use_short_slot;
613
614 if (erp_valid) {
615 use_protection = (erp & WLAN_ERP_USE_PROTECTION) != 0;
616 use_short_preamble = (erp & WLAN_ERP_BARKER_PREAMBLE) == 0;
617 } else {
618 use_protection = false;
619 use_short_preamble = !!(capab & WLAN_CAPABILITY_SHORT_PREAMBLE);
620 }
621
622 use_short_slot = !!(capab & WLAN_CAPABILITY_SHORT_SLOT_TIME);
5628221c 623
471b3efd 624 if (use_protection != bss_conf->use_cts_prot) {
f4ea83dd 625#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
5628221c 626 if (net_ratelimit()) {
0c68ae26 627 printk(KERN_DEBUG "%s: CTS protection %s (BSSID=%pM)\n",
471b3efd 628 sdata->dev->name,
5628221c 629 use_protection ? "enabled" : "disabled",
0c68ae26 630 ifsta->bssid);
5628221c 631 }
f4ea83dd 632#endif
471b3efd
JB		 633 bss_conf->use_cts_prot = use_protection;
634 changed |= BSS_CHANGED_ERP_CTS_PROT;
5628221c 635 }
7e9ed188 636
d43c7b37 637 if (use_short_preamble != bss_conf->use_short_preamble) {
f4ea83dd 638#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
7e9ed188
DD		 639 if (net_ratelimit()) {
640 printk(KERN_DEBUG "%s: switched to %s barker preamble"
0c68ae26 641 " (BSSID=%pM)\n",
471b3efd 642 sdata->dev->name,
d43c7b37 643 use_short_preamble ? "short" : "long",
0c68ae26 644 ifsta->bssid);
7e9ed188 645 }
f4ea83dd 646#endif
d43c7b37 647 bss_conf->use_short_preamble = use_short_preamble;
471b3efd 648 changed |= BSS_CHANGED_ERP_PREAMBLE;
7e9ed188 649 }
d9430a32 650
7a5158ef
JB		 651 if (use_short_slot != bss_conf->use_short_slot) {
652#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
653 if (net_ratelimit()) {
391429c1
CL		 654 printk(KERN_DEBUG "%s: switched to %s slot time"
655 " (BSSID=%pM)\n",
7a5158ef
JB		 656 sdata->dev->name,
657 use_short_slot ? "short" : "long",
658 ifsta->bssid);
659 }
660#endif
661 bss_conf->use_short_slot = use_short_slot;
662 changed |= BSS_CHANGED_ERP_SLOT;
50c4afb9
JL		 663 }
664
665 return changed;
666}
667
f5e5bf25
TW		 668static void ieee80211_sta_send_apinfo(struct ieee80211_sub_if_data *sdata,
669 struct ieee80211_if_sta *ifsta)
670{
671 union iwreq_data wrqu;
672 memset(&wrqu, 0, sizeof(wrqu));
673 if (ifsta->flags & IEEE80211_STA_ASSOCIATED)
674 memcpy(wrqu.ap_addr.sa_data, sdata->u.sta.bssid, ETH_ALEN);
675 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
676 wireless_send_event(sdata->dev, SIOCGIWAP, &wrqu, NULL);
677}
678
f698d856 679static void ieee80211_sta_send_associnfo(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 680 struct ieee80211_if_sta *ifsta)
681{
74af0250
LT		 682 char *buf;
683 size_t len;
684 int i;
f0706e82
JB		 685 union iwreq_data wrqu;
686
74af0250
LT		 687 if (!ifsta->assocreq_ies && !ifsta->assocresp_ies)
688 return;
689
690 buf = kmalloc(50 + 2 * (ifsta->assocreq_ies_len +
691 ifsta->assocresp_ies_len), GFP_KERNEL);
692 if (!buf)
693 return;
694
695 len = sprintf(buf, "ASSOCINFO(");
f0706e82 696 if (ifsta->assocreq_ies) {
74af0250
LT		 697 len += sprintf(buf + len, "ReqIEs=");
698 for (i = 0; i < ifsta->assocreq_ies_len; i++) {
699 len += sprintf(buf + len, "%02x",
700 ifsta->assocreq_ies[i]);
701 }
f0706e82 702 }
087d833e 703 if (ifsta->assocresp_ies) {
74af0250
LT		 704 if (ifsta->assocreq_ies)
705 len += sprintf(buf + len, " ");
706 len += sprintf(buf + len, "RespIEs=");
707 for (i = 0; i < ifsta->assocresp_ies_len; i++) {
708 len += sprintf(buf + len, "%02x",
709 ifsta->assocresp_ies[i]);
710 }
f0706e82 711 }
74af0250
LT		 712 len += sprintf(buf + len, ")");
713
714 if (len > IW_CUSTOM_MAX) {
715 len = sprintf(buf, "ASSOCRESPIE=");
716 for (i = 0; i < ifsta->assocresp_ies_len; i++) {
717 len += sprintf(buf + len, "%02x",
718 ifsta->assocresp_ies[i]);
719 }
720 }
721
ad788b5e
JL		 722 if (len <= IW_CUSTOM_MAX) {
723 memset(&wrqu, 0, sizeof(wrqu));
724 wrqu.data.length = len;
725 wireless_send_event(sdata->dev, IWEVCUSTOM, &wrqu, buf);
726 }
74af0250
LT		 727
728 kfree(buf);
f0706e82
JB		 729}
730
731
f698d856 732static void ieee80211_set_associated(struct ieee80211_sub_if_data *sdata,
ae5eb026
JB		 733 struct ieee80211_if_sta *ifsta,
734 u32 bss_info_changed)
f0706e82 735{
471b3efd 736 struct ieee80211_local *local = sdata->local;
38668c05 737 struct ieee80211_conf *conf = &local_to_hw(local)->conf;
f0706e82 738
c2b13452 739 struct ieee80211_bss *bss;
d6f2da5b 740
ae5eb026 741 bss_info_changed |= BSS_CHANGED_ASSOC;
f5e5bf25 742 ifsta->flags |= IEEE80211_STA_ASSOCIATED;
5628221c 743
05c914fe 744 if (sdata->vif.type != NL80211_IFTYPE_STATION)
f5e5bf25 745 return;
21c0cbe7 746
f5e5bf25
TW		 747 bss = ieee80211_rx_bss_get(local, ifsta->bssid,
748 conf->channel->center_freq,
749 ifsta->ssid, ifsta->ssid_len);
750 if (bss) {
751 /* set timing information */
bda3933a
JB		 752 sdata->vif.bss_conf.beacon_int = bss->beacon_int;
753 sdata->vif.bss_conf.timestamp = bss->timestamp;
754 sdata->vif.bss_conf.dtim_period = bss->dtim_period;
21c0cbe7 755
ae5eb026 756 bss_info_changed |= ieee80211_handle_bss_capability(sdata,
7a5158ef 757 bss->capability, bss->has_erp_value, bss->erp_value);
9ac19a90
JB		 758
759 ieee80211_rx_bss_put(local, bss);
f0706e82
JB		 760 }
761
9ac19a90
JB		 762 ifsta->flags |= IEEE80211_STA_PREV_BSSID_SET;
763 memcpy(ifsta->prev_bssid, sdata->u.sta.bssid, ETH_ALEN);
764 ieee80211_sta_send_associnfo(sdata, ifsta);
9306102e 765
9ac19a90
JB		 766 ifsta->last_probe = jiffies;
767 ieee80211_led_assoc(local, 1);
9306102e 768
bda3933a 769 sdata->vif.bss_conf.assoc = 1;
96dd22ac
JB		 770 /*
771 * For now just always ask the driver to update the basic rateset
772 * when we have associated, we aren't checking whether it actually
773 * changed or not.
774 */
ae5eb026
JB		 775 bss_info_changed |= BSS_CHANGED_BASIC_RATES;
776 ieee80211_bss_info_change_notify(sdata, bss_info_changed);
f0706e82 777
869717fb
VN		 778 if (local->powersave &&
779 !(local->hw.flags & IEEE80211_HW_NO_STACK_DYNAMIC_PS)) {
520eb820
KV		 780 if (local->dynamic_ps_timeout > 0)
781 mod_timer(&local->dynamic_ps_timer, jiffies +
782 msecs_to_jiffies(local->dynamic_ps_timeout));
783 else {
a97b77b9 784 ieee80211_send_nullfunc(local, sdata, 1);
520eb820
KV		 785 conf->flags |= IEEE80211_CONF_PS;
786 ieee80211_hw_config(local,
787 IEEE80211_CONF_CHANGE_PS);
788 }
e0cb686f
KV		 789 }
790
9ac19a90
JB		 791 netif_tx_start_all_queues(sdata->dev);
792 netif_carrier_on(sdata->dev);
f0706e82 793
9ac19a90 794 ieee80211_sta_send_apinfo(sdata, ifsta);
f0706e82
JB		 795}
796
9ac19a90
JB		 797static void ieee80211_direct_probe(struct ieee80211_sub_if_data *sdata,
798 struct ieee80211_if_sta *ifsta)
f0706e82 799{
9ac19a90
JB		 800 ifsta->direct_probe_tries++;
801 if (ifsta->direct_probe_tries > IEEE80211_AUTH_MAX_TRIES) {
0c68ae26
JB		 802 printk(KERN_DEBUG "%s: direct probe to AP %pM timed out\n",
803 sdata->dev->name, ifsta->bssid);
9ac19a90 804 ifsta->state = IEEE80211_STA_MLME_DISABLED;
4a68ec53 805 ieee80211_sta_send_apinfo(sdata, ifsta);
f0706e82
JB		 806 return;
807 }
f0706e82 808
0c68ae26
JB		 809 printk(KERN_DEBUG "%s: direct probe to AP %pM try %d\n",
810 sdata->dev->name, ifsta->bssid,
9ac19a90 811 ifsta->direct_probe_tries);
f0706e82 812
9ac19a90 813 ifsta->state = IEEE80211_STA_MLME_DIRECT_PROBE;
f0706e82 814
9ac19a90
JB		 815 set_bit(IEEE80211_STA_REQ_DIRECT_PROBE, &ifsta->request);
816
817 /* Direct probe is sent to broadcast address as some APs
818 * will not answer to direct packet in unassociated state.
819 */
820 ieee80211_send_probe_req(sdata, NULL,
821 ifsta->ssid, ifsta->ssid_len);
822
823 mod_timer(&ifsta->timer, jiffies + IEEE80211_AUTH_TIMEOUT);
60f8b39c 824}
f0706e82 825
9ac19a90
JB		 826
827static void ieee80211_authenticate(struct ieee80211_sub_if_data *sdata,
828 struct ieee80211_if_sta *ifsta)
f0706e82 829{
9ac19a90
JB		 830 ifsta->auth_tries++;
831 if (ifsta->auth_tries > IEEE80211_AUTH_MAX_TRIES) {
0c68ae26 832 printk(KERN_DEBUG "%s: authentication with AP %pM"
9ac19a90 833 " timed out\n",
0c68ae26 834 sdata->dev->name, ifsta->bssid);
9ac19a90 835 ifsta->state = IEEE80211_STA_MLME_DISABLED;
4a68ec53 836 ieee80211_sta_send_apinfo(sdata, ifsta);
f0706e82
JB		 837 return;
838 }
f0706e82 839
9ac19a90 840 ifsta->state = IEEE80211_STA_MLME_AUTHENTICATE;
0c68ae26
JB		 841 printk(KERN_DEBUG "%s: authenticate with AP %pM\n",
842 sdata->dev->name, ifsta->bssid);
f0706e82 843
9ac19a90
JB		 844 ieee80211_send_auth(sdata, ifsta, 1, NULL, 0, 0);
845
846 mod_timer(&ifsta->timer, jiffies + IEEE80211_AUTH_TIMEOUT);
f0706e82
JB		 847}
848
5925d976
VN		 849/*
850 * The disassoc 'reason' argument can be either our own reason
851 * if self disconnected or a reason code from the AP.
852 */
aa458d17
TW		 853static void ieee80211_set_disassoc(struct ieee80211_sub_if_data *sdata,
854 struct ieee80211_if_sta *ifsta, bool deauth,
855 bool self_disconnected, u16 reason)
856{
857 struct ieee80211_local *local = sdata->local;
858 struct sta_info *sta;
e0cb686f 859 u32 changed = 0, config_changed = 0;
aa458d17
TW		 860
861 rcu_read_lock();
862
863 sta = sta_info_get(local, ifsta->bssid);
864 if (!sta) {
865 rcu_read_unlock();
866 return;
867 }
868
869 if (deauth) {
870 ifsta->direct_probe_tries = 0;
871 ifsta->auth_tries = 0;
872 }
873 ifsta->assoc_scan_tries = 0;
874 ifsta->assoc_tries = 0;
875
24e64622 876 netif_tx_stop_all_queues(sdata->dev);
aa458d17
TW		 877 netif_carrier_off(sdata->dev);
878
17741cdc 879 ieee80211_sta_tear_down_BA_sessions(sdata, sta->sta.addr);
aa458d17
TW		 880
881 if (self_disconnected) {
882 if (deauth)
ef422bc0
JB		 883 ieee80211_send_deauth_disassoc(sdata,
884 IEEE80211_STYPE_DEAUTH, reason);
aa458d17 885 else
ef422bc0
JB		 886 ieee80211_send_deauth_disassoc(sdata,
887 IEEE80211_STYPE_DISASSOC, reason);
aa458d17
TW		 888 }
889
f5e5bf25
TW		 890 ifsta->flags &= ~IEEE80211_STA_ASSOCIATED;
891 changed |= ieee80211_reset_erp_info(sdata);
892
f5e5bf25 893 ieee80211_led_assoc(local, 0);
ae5eb026
JB		 894 changed |= BSS_CHANGED_ASSOC;
895 sdata->vif.bss_conf.assoc = false;
f5e5bf25
TW		 896
897 ieee80211_sta_send_apinfo(sdata, ifsta);
aa458d17 898
5925d976 899 if (self_disconnected || reason == WLAN_REASON_DISASSOC_STA_HAS_LEFT)
aa458d17
TW		 900 ifsta->state = IEEE80211_STA_MLME_DISABLED;
901
aa458d17
TW		 902 rcu_read_unlock();
903
4797938c 904 /* channel(_type) changes are handled by ieee80211_hw_config */
094d05dc 905 local->oper_channel_type = NL80211_CHAN_NO_HT;
e0cb686f 906
520eb820
KV		 907 del_timer_sync(&local->dynamic_ps_timer);
908 cancel_work_sync(&local->dynamic_ps_enable_work);
909
e0cb686f
KV		 910 if (local->hw.conf.flags & IEEE80211_CONF_PS) {
911 local->hw.conf.flags &= ~IEEE80211_CONF_PS;
912 config_changed |= IEEE80211_CONF_CHANGE_PS;
913 }
ae5eb026 914
e0cb686f 915 ieee80211_hw_config(local, config_changed);
ae5eb026 916 ieee80211_bss_info_change_notify(sdata, changed);
8e268e47
TW		 917
918 rcu_read_lock();
919
920 sta = sta_info_get(local, ifsta->bssid);
921 if (!sta) {
922 rcu_read_unlock();
923 return;
924 }
925
926 sta_info_unlink(&sta);
927
928 rcu_read_unlock();
929
930 sta_info_destroy(sta);
aa458d17 931}
f0706e82 932
9ac19a90
JB		 933static int ieee80211_sta_wep_configured(struct ieee80211_sub_if_data *sdata)
934{
935 if (!sdata || !sdata->default_key ||
936 sdata->default_key->conf.alg != ALG_WEP)
937 return 0;
938 return 1;
939}
940
f698d856 941static int ieee80211_privacy_mismatch(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 942 struct ieee80211_if_sta *ifsta)
943{
f698d856 944 struct ieee80211_local *local = sdata->local;
c2b13452 945 struct ieee80211_bss *bss;
5b98b1f7
JB		 946 int bss_privacy;
947 int wep_privacy;
948 int privacy_invoked;
f0706e82 949
5b98b1f7 950 if (!ifsta || (ifsta->flags & IEEE80211_STA_MIXED_CELL))
f0706e82
JB		 951 return 0;
952
f698d856 953 bss = ieee80211_rx_bss_get(local, ifsta->bssid,
8318d78a 954 local->hw.conf.channel->center_freq,
cffdd30d 955 ifsta->ssid, ifsta->ssid_len);
f0706e82
JB		 956 if (!bss)
957 return 0;
958
5b98b1f7 959 bss_privacy = !!(bss->capability & WLAN_CAPABILITY_PRIVACY);
f698d856 960 wep_privacy = !!ieee80211_sta_wep_configured(sdata);
5b98b1f7 961 privacy_invoked = !!(ifsta->flags & IEEE80211_STA_PRIVACY_INVOKED);
f0706e82 962
3e122be0 963 ieee80211_rx_bss_put(local, bss);
f0706e82 964
5b98b1f7
JB		 965 if ((bss_privacy == wep_privacy) || (bss_privacy == privacy_invoked))
966 return 0;
967
968 return 1;
f0706e82
JB		 969}
970
f698d856 971static void ieee80211_associate(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 972 struct ieee80211_if_sta *ifsta)
973{
974 ifsta->assoc_tries++;
975 if (ifsta->assoc_tries > IEEE80211_ASSOC_MAX_TRIES) {
0c68ae26 976 printk(KERN_DEBUG "%s: association with AP %pM"
f0706e82 977 " timed out\n",
0c68ae26 978 sdata->dev->name, ifsta->bssid);
48c2fc59 979 ifsta->state = IEEE80211_STA_MLME_DISABLED;
4a68ec53 980 ieee80211_sta_send_apinfo(sdata, ifsta);
f0706e82
JB		 981 return;
982 }
983
48c2fc59 984 ifsta->state = IEEE80211_STA_MLME_ASSOCIATE;
0c68ae26
JB		 985 printk(KERN_DEBUG "%s: associate with AP %pM\n",
986 sdata->dev->name, ifsta->bssid);
f698d856 987 if (ieee80211_privacy_mismatch(sdata, ifsta)) {
f0706e82 988 printk(KERN_DEBUG "%s: mismatch in privacy configuration and "
f698d856 989 "mixed-cell disabled - abort association\n", sdata->dev->name);
48c2fc59 990 ifsta->state = IEEE80211_STA_MLME_DISABLED;
f0706e82
JB		 991 return;
992 }
993
f698d856 994 ieee80211_send_assoc(sdata, ifsta);
f0706e82
JB		 995
996 mod_timer(&ifsta->timer, jiffies + IEEE80211_ASSOC_TIMEOUT);
997}
998
999
f698d856 1000static void ieee80211_associated(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1001 struct ieee80211_if_sta *ifsta)
1002{
f698d856 1003 struct ieee80211_local *local = sdata->local;
f0706e82
JB		 1004 struct sta_info *sta;
1005 int disassoc;
1006
1007 /* TODO: start monitoring current AP signal quality and number of
1008 * missed beacons. Scan other channels every now and then and search
1009 * for better APs. */
1010 /* TODO: remove expired BSSes */
1011
48c2fc59 1012 ifsta->state = IEEE80211_STA_MLME_ASSOCIATED;
f0706e82 1013
d0709a65
JB		 1014 rcu_read_lock();
1015
f0706e82
JB		 1016 sta = sta_info_get(local, ifsta->bssid);
1017 if (!sta) {
0c68ae26
JB		 1018 printk(KERN_DEBUG "%s: No STA entry for own AP %pM\n",
1019 sdata->dev->name, ifsta->bssid);
f0706e82
JB		 1020 disassoc = 1;
1021 } else {
1022 disassoc = 0;
1023 if (time_after(jiffies,
1024 sta->last_rx + IEEE80211_MONITORING_INTERVAL)) {
d6f2da5b 1025 if (ifsta->flags & IEEE80211_STA_PROBEREQ_POLL) {
f0706e82 1026 printk(KERN_DEBUG "%s: No ProbeResp from "
0c68ae26 1027 "current AP %pM - assume out of "
f0706e82 1028 "range\n",
0c68ae26 1029 sdata->dev->name, ifsta->bssid);
f0706e82 1030 disassoc = 1;
d6f2da5b 1031 } else
f698d856 1032 ieee80211_send_probe_req(sdata, ifsta->bssid,
4dfe51e1
JB		 1033 ifsta->ssid,
1034 ifsta->ssid_len);
d6f2da5b 1035 ifsta->flags ^= IEEE80211_STA_PROBEREQ_POLL;
f0706e82 1036 } else {
d6f2da5b 1037 ifsta->flags &= ~IEEE80211_STA_PROBEREQ_POLL;
f0706e82
JB		 1038 if (time_after(jiffies, ifsta->last_probe +
1039 IEEE80211_PROBE_INTERVAL)) {
1040 ifsta->last_probe = jiffies;
f698d856 1041 ieee80211_send_probe_req(sdata, ifsta->bssid,
f0706e82
JB		 1042 ifsta->ssid,
1043 ifsta->ssid_len);
1044 }
1045 }
f0706e82 1046 }
d0709a65
JB		 1047
1048 rcu_read_unlock();
1049
60f8b39c
JB		 1050 if (disassoc)
1051 ieee80211_set_disassoc(sdata, ifsta, true, true,
1052 WLAN_REASON_PREV_AUTH_NOT_VALID);
1053 else
1054 mod_timer(&ifsta->timer, jiffies +
1055 IEEE80211_MONITORING_INTERVAL);
f0706e82
JB		 1056}
1057
1058
f698d856 1059static void ieee80211_auth_completed(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1060 struct ieee80211_if_sta *ifsta)
1061{
f698d856 1062 printk(KERN_DEBUG "%s: authenticated\n", sdata->dev->name);
d6f2da5b 1063 ifsta->flags |= IEEE80211_STA_AUTHENTICATED;
f698d856 1064 ieee80211_associate(sdata, ifsta);
f0706e82
JB		 1065}
1066
1067
f698d856 1068static void ieee80211_auth_challenge(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1069 struct ieee80211_if_sta *ifsta,
1070 struct ieee80211_mgmt *mgmt,
1071 size_t len)
1072{
1073 u8 *pos;
1074 struct ieee802_11_elems elems;
1075
f0706e82 1076 pos = mgmt->u.auth.variable;
67a4cce4 1077 ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems);
f4ea83dd 1078 if (!elems.challenge)
f0706e82 1079 return;
f698d856 1080 ieee80211_send_auth(sdata, ifsta, 3, elems.challenge - 2,
f0706e82
JB		 1081 elems.challenge_len + 2, 1);
1082}
1083
f698d856 1084static void ieee80211_rx_mgmt_auth(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1085 struct ieee80211_if_sta *ifsta,
1086 struct ieee80211_mgmt *mgmt,
1087 size_t len)
1088{
f0706e82
JB		 1089 u16 auth_alg, auth_transaction, status_code;
1090
48c2fc59 1091 if (ifsta->state != IEEE80211_STA_MLME_AUTHENTICATE &&
05c914fe 1092 sdata->vif.type != NL80211_IFTYPE_ADHOC)
f0706e82 1093 return;
f0706e82 1094
f4ea83dd 1095 if (len < 24 + 6)
f0706e82 1096 return;
f0706e82 1097
05c914fe 1098 if (sdata->vif.type != NL80211_IFTYPE_ADHOC &&
f4ea83dd 1099 memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN) != 0)
f0706e82 1100 return;
f0706e82 1101
05c914fe 1102 if (sdata->vif.type != NL80211_IFTYPE_ADHOC &&
f4ea83dd 1103 memcmp(ifsta->bssid, mgmt->bssid, ETH_ALEN) != 0)
f0706e82 1104 return;
f0706e82
JB		 1105
1106 auth_alg = le16_to_cpu(mgmt->u.auth.auth_alg);
1107 auth_transaction = le16_to_cpu(mgmt->u.auth.auth_transaction);
1108 status_code = le16_to_cpu(mgmt->u.auth.status_code);
1109
05c914fe 1110 if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
135a2110
JB		 1111 /*
1112 * IEEE 802.11 standard does not require authentication in IBSS
f0706e82
JB		 1113 * networks and most implementations do not seem to use it.
1114 * However, try to reply to authentication attempts if someone
1115 * has actually implemented this.
135a2110 1116 */
f4ea83dd 1117 if (auth_alg != WLAN_AUTH_OPEN || auth_transaction != 1)
f0706e82 1118 return;
f698d856 1119 ieee80211_send_auth(sdata, ifsta, 2, NULL, 0, 0);
f0706e82
JB		 1120 }
1121
1122 if (auth_alg != ifsta->auth_alg ||
f4ea83dd 1123 auth_transaction != ifsta->auth_transaction)
f0706e82 1124 return;
f0706e82
JB		 1125
1126 if (status_code != WLAN_STATUS_SUCCESS) {
f0706e82
JB		 1127 if (status_code == WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG) {
1128 u8 algs[3];
1129 const int num_algs = ARRAY_SIZE(algs);
1130 int i, pos;
1131 algs[0] = algs[1] = algs[2] = 0xff;
1132 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_OPEN)
1133 algs[0] = WLAN_AUTH_OPEN;
1134 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_SHARED_KEY)
1135 algs[1] = WLAN_AUTH_SHARED_KEY;
1136 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_LEAP)
1137 algs[2] = WLAN_AUTH_LEAP;
1138 if (ifsta->auth_alg == WLAN_AUTH_OPEN)
1139 pos = 0;
1140 else if (ifsta->auth_alg == WLAN_AUTH_SHARED_KEY)
1141 pos = 1;
1142 else
1143 pos = 2;
1144 for (i = 0; i < num_algs; i++) {
1145 pos++;
1146 if (pos >= num_algs)
1147 pos = 0;
1148 if (algs[pos] == ifsta->auth_alg ||
1149 algs[pos] == 0xff)
1150 continue;
1151 if (algs[pos] == WLAN_AUTH_SHARED_KEY &&
f698d856 1152 !ieee80211_sta_wep_configured(sdata))
f0706e82
JB		 1153 continue;
1154 ifsta->auth_alg = algs[pos];
f0706e82
JB		 1155 break;
1156 }
1157 }
1158 return;
1159 }
1160
1161 switch (ifsta->auth_alg) {
1162 case WLAN_AUTH_OPEN:
1163 case WLAN_AUTH_LEAP:
f698d856 1164 ieee80211_auth_completed(sdata, ifsta);
f0706e82
JB		 1165 break;
1166 case WLAN_AUTH_SHARED_KEY:
1167 if (ifsta->auth_transaction == 4)
f698d856 1168 ieee80211_auth_completed(sdata, ifsta);
f0706e82 1169 else
f698d856 1170 ieee80211_auth_challenge(sdata, ifsta, mgmt, len);
f0706e82
JB		 1171 break;
1172 }
1173}
1174
1175
f698d856 1176static void ieee80211_rx_mgmt_deauth(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1177 struct ieee80211_if_sta *ifsta,
1178 struct ieee80211_mgmt *mgmt,
1179 size_t len)
1180{
1181 u16 reason_code;
1182
f4ea83dd 1183 if (len < 24 + 2)
f0706e82 1184 return;
f0706e82 1185
f4ea83dd 1186 if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN))
f0706e82 1187 return;
f0706e82
JB		 1188
1189 reason_code = le16_to_cpu(mgmt->u.deauth.reason_code);
1190
988c0f72 1191 if (ifsta->flags & IEEE80211_STA_AUTHENTICATED)
97c8b013
ZY		 1192 printk(KERN_DEBUG "%s: deauthenticated (Reason: %u)\n",
1193 sdata->dev->name, reason_code);
f0706e82 1194
48c2fc59
TW		 1195 if (ifsta->state == IEEE80211_STA_MLME_AUTHENTICATE ||
1196 ifsta->state == IEEE80211_STA_MLME_ASSOCIATE ||
1197 ifsta->state == IEEE80211_STA_MLME_ASSOCIATED) {
9859b81e 1198 ifsta->state = IEEE80211_STA_MLME_DIRECT_PROBE;
f0706e82
JB		 1199 mod_timer(&ifsta->timer, jiffies +
1200 IEEE80211_RETRY_AUTH_INTERVAL);
1201 }
1202
aa458d17 1203 ieee80211_set_disassoc(sdata, ifsta, true, false, 0);
d6f2da5b 1204 ifsta->flags &= ~IEEE80211_STA_AUTHENTICATED;
f0706e82
JB		 1205}
1206
1207
f698d856 1208static void ieee80211_rx_mgmt_disassoc(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1209 struct ieee80211_if_sta *ifsta,
1210 struct ieee80211_mgmt *mgmt,
1211 size_t len)
1212{
1213 u16 reason_code;
1214
f4ea83dd 1215 if (len < 24 + 2)
f0706e82 1216 return;
f0706e82 1217
f4ea83dd 1218 if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN))
f0706e82 1219 return;
f0706e82
JB		 1220
1221 reason_code = le16_to_cpu(mgmt->u.disassoc.reason_code);
1222
d6f2da5b 1223 if (ifsta->flags & IEEE80211_STA_ASSOCIATED)
97c8b013
ZY		 1224 printk(KERN_DEBUG "%s: disassociated (Reason: %u)\n",
1225 sdata->dev->name, reason_code);
f0706e82 1226
48c2fc59
TW		 1227 if (ifsta->state == IEEE80211_STA_MLME_ASSOCIATED) {
1228 ifsta->state = IEEE80211_STA_MLME_ASSOCIATE;
f0706e82
JB		 1229 mod_timer(&ifsta->timer, jiffies +
1230 IEEE80211_RETRY_AUTH_INTERVAL);
1231 }
1232
5925d976 1233 ieee80211_set_disassoc(sdata, ifsta, false, false, reason_code);
f0706e82
JB		 1234}
1235
1236
471b3efd 1237static void ieee80211_rx_mgmt_assoc_resp(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1238 struct ieee80211_if_sta *ifsta,
1239 struct ieee80211_mgmt *mgmt,
1240 size_t len,
1241 int reassoc)
1242{
471b3efd 1243 struct ieee80211_local *local = sdata->local;
8318d78a 1244 struct ieee80211_supported_band *sband;
f0706e82 1245 struct sta_info *sta;
8318d78a 1246 u64 rates, basic_rates;
f0706e82
JB		 1247 u16 capab_info, status_code, aid;
1248 struct ieee802_11_elems elems;
bda3933a 1249 struct ieee80211_bss_conf *bss_conf = &sdata->vif.bss_conf;
f0706e82 1250 u8 *pos;
ae5eb026 1251 u32 changed = 0;
f0706e82 1252 int i, j;
ddf4ac53 1253 bool have_higher_than_11mbit = false, newsta = false;
ae5eb026 1254 u16 ap_ht_cap_flags;
f0706e82
JB		 1255
1256 /* AssocResp and ReassocResp have identical structure, so process both
1257 * of them in this function. */
1258
48c2fc59 1259 if (ifsta->state != IEEE80211_STA_MLME_ASSOCIATE)
f0706e82 1260 return;
f0706e82 1261
f4ea83dd 1262 if (len < 24 + 6)
f0706e82 1263 return;
f0706e82 1264
f4ea83dd 1265 if (memcmp(ifsta->bssid, mgmt->sa, ETH_ALEN) != 0)
f0706e82 1266 return;
f0706e82
JB		 1267
1268 capab_info = le16_to_cpu(mgmt->u.assoc_resp.capab_info);
1269 status_code = le16_to_cpu(mgmt->u.assoc_resp.status_code);
1270 aid = le16_to_cpu(mgmt->u.assoc_resp.aid);
f0706e82 1271
0c68ae26 1272 printk(KERN_DEBUG "%s: RX %sssocResp from %pM (capab=0x%x "
f0706e82 1273 "status=%d aid=%d)\n",
0c68ae26 1274 sdata->dev->name, reassoc ? "Rea" : "A", mgmt->sa,
ddd68587 1275 capab_info, status_code, (u16)(aid & ~(BIT(15) | BIT(14))));
f0706e82
JB		 1276
1277 if (status_code != WLAN_STATUS_SUCCESS) {
1278 printk(KERN_DEBUG "%s: AP denied association (code=%d)\n",
f698d856 1279 sdata->dev->name, status_code);
8a69aa93
DD		 1280 /* if this was a reassociation, ensure we try a "full"
1281 * association next time. This works around some broken APs
1282 * which do not correctly reject reassociation requests. */
d6f2da5b 1283 ifsta->flags &= ~IEEE80211_STA_PREV_BSSID_SET;
f0706e82
JB		 1284 return;
1285 }
1286
1dd84aa2
JB		 1287 if ((aid & (BIT(15) | BIT(14))) != (BIT(15) | BIT(14)))
1288 printk(KERN_DEBUG "%s: invalid aid value %d; bits 15:14 not "
f698d856 1289 "set\n", sdata->dev->name, aid);
1dd84aa2
JB		 1290 aid &= ~(BIT(15) | BIT(14));
1291
f0706e82 1292 pos = mgmt->u.assoc_resp.variable;
67a4cce4 1293 ieee802_11_parse_elems(pos, len - (pos - (u8 *) mgmt), &elems);
f0706e82
JB		 1294
1295 if (!elems.supp_rates) {
1296 printk(KERN_DEBUG "%s: no SuppRates element in AssocResp\n",
f698d856 1297 sdata->dev->name);
f0706e82
JB		 1298 return;
1299 }
1300
f698d856 1301 printk(KERN_DEBUG "%s: associated\n", sdata->dev->name);
f0706e82
JB		 1302 ifsta->aid = aid;
1303 ifsta->ap_capab = capab_info;
1304
1305 kfree(ifsta->assocresp_ies);
1306 ifsta->assocresp_ies_len = len - (pos - (u8 *) mgmt);
0ec0b7ac 1307 ifsta->assocresp_ies = kmalloc(ifsta->assocresp_ies_len, GFP_KERNEL);
f0706e82
JB		 1308 if (ifsta->assocresp_ies)
1309 memcpy(ifsta->assocresp_ies, pos, ifsta->assocresp_ies_len);
1310
d0709a65
JB		 1311 rcu_read_lock();
1312
f0706e82
JB		 1313 /* Add STA entry for the AP */
1314 sta = sta_info_get(local, ifsta->bssid);
1315 if (!sta) {
c2b13452 1316 struct ieee80211_bss *bss;
ddf4ac53
JB		 1317
1318 newsta = true;
d0709a65 1319
73651ee6
JB		 1320 sta = sta_info_alloc(sdata, ifsta->bssid, GFP_ATOMIC);
1321 if (!sta) {
1322 printk(KERN_DEBUG "%s: failed to alloc STA entry for"
f698d856 1323 " the AP\n", sdata->dev->name);
d0709a65 1324 rcu_read_unlock();
f0706e82
JB		 1325 return;
1326 }
60f8b39c
JB		 1327 bss = ieee80211_rx_bss_get(local, ifsta->bssid,
1328 local->hw.conf.channel->center_freq,
1329 ifsta->ssid, ifsta->ssid_len);
1330 if (bss) {
1331 sta->last_signal = bss->signal;
1332 sta->last_qual = bss->qual;
1333 sta->last_noise = bss->noise;
1334 ieee80211_rx_bss_put(local, bss);
1335 }
f709fc69 1336
60f8b39c
JB		 1337 /* update new sta with its last rx activity */
1338 sta->last_rx = jiffies;
f709fc69 1339 }
f709fc69 1340
60f8b39c
JB		 1341 /*
1342 * FIXME: Do we really need to update the sta_info's information here?
1343 * We already know about the AP (we found it in our list) so it
1344 * should already be filled with the right info, no?
1345 * As is stands, all this is racy because typically we assume
1346 * the information that is filled in here (except flags) doesn't
1347 * change while a STA structure is alive. As such, it should move
1348 * to between the sta_info_alloc() and sta_info_insert() above.
1349 */
f709fc69 1350
60f8b39c
JB		 1351 set_sta_flags(sta, WLAN_STA_AUTH | WLAN_STA_ASSOC | WLAN_STA_ASSOC_AP |
1352 WLAN_STA_AUTHORIZED);
05e5e883 1353
60f8b39c
JB		 1354 rates = 0;
1355 basic_rates = 0;
1356 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
f709fc69 1357
60f8b39c
JB		 1358 for (i = 0; i < elems.supp_rates_len; i++) {
1359 int rate = (elems.supp_rates[i] & 0x7f) * 5;
d61272cb 1360 bool is_basic = !!(elems.supp_rates[i] & 0x80);
f709fc69 1361
60f8b39c
JB		 1362 if (rate > 110)
1363 have_higher_than_11mbit = true;
1364
1365 for (j = 0; j < sband->n_bitrates; j++) {
d61272cb 1366 if (sband->bitrates[j].bitrate == rate) {
60f8b39c 1367 rates |= BIT(j);
d61272cb
TW		 1368 if (is_basic)
1369 basic_rates |= BIT(j);
1370 break;
1371 }
f709fc69 1372 }
f709fc69
LCC		 1373 }
1374
60f8b39c
JB		 1375 for (i = 0; i < elems.ext_supp_rates_len; i++) {
1376 int rate = (elems.ext_supp_rates[i] & 0x7f) * 5;
d61272cb 1377 bool is_basic = !!(elems.supp_rates[i] & 0x80);
f0706e82 1378
60f8b39c
JB		 1379 if (rate > 110)
1380 have_higher_than_11mbit = true;
f0706e82 1381
60f8b39c 1382 for (j = 0; j < sband->n_bitrates; j++) {
d61272cb 1383 if (sband->bitrates[j].bitrate == rate) {
60f8b39c 1384 rates |= BIT(j);
d61272cb
TW		 1385 if (is_basic)
1386 basic_rates |= BIT(j);
1387 break;
1388 }
60f8b39c 1389 }
1ebebea8 1390 }
f0706e82 1391
323ce79a 1392 sta->sta.supp_rates[local->hw.conf.channel->band] = rates;
bda3933a 1393 sdata->vif.bss_conf.basic_rates = basic_rates;
60f8b39c
JB		 1394
1395 /* cf. IEEE 802.11 9.2.12 */
1396 if (local->hw.conf.channel->band == IEEE80211_BAND_2GHZ &&
1397 have_higher_than_11mbit)
1398 sdata->flags |= IEEE80211_SDATA_OPERATING_GMODE;
1399 else
1400 sdata->flags &= ~IEEE80211_SDATA_OPERATING_GMODE;
f0706e82 1401
ae5eb026
JB		 1402 if (elems.ht_cap_elem)
1403 ieee80211_ht_cap_ie_to_sta_ht_cap(sband,
d9fe60de 1404 elems.ht_cap_elem, &sta->sta.ht_cap);
ae5eb026
JB		 1405
1406 ap_ht_cap_flags = sta->sta.ht_cap.cap;
f0706e82 1407
4b7679a5 1408 rate_control_rate_init(sta);
f0706e82 1409
ddf4ac53 1410 if (elems.wmm_param)
60f8b39c 1411 set_sta_flags(sta, WLAN_STA_WME);
ddf4ac53
JB		 1412
1413 if (newsta) {
1414 int err = sta_info_insert(sta);
1415 if (err) {
1416 printk(KERN_DEBUG "%s: failed to insert STA entry for"
1417 " the AP (error %d)\n", sdata->dev->name, err);
1418 rcu_read_unlock();
1419 return;
1420 }
1421 }
1422
1423 rcu_read_unlock();
1424
1425 if (elems.wmm_param)
60f8b39c
JB		 1426 ieee80211_sta_wmm_params(local, ifsta, elems.wmm_param,
1427 elems.wmm_param_len);
f0706e82 1428
ae5eb026
JB		 1429 if (elems.ht_info_elem && elems.wmm_param &&
1430 (ifsta->flags & IEEE80211_STA_WMM_ENABLED))
1431 changed |= ieee80211_enable_ht(sdata, elems.ht_info_elem,
1432 ap_ht_cap_flags);
1433
60f8b39c
JB		 1434 /* set AID and assoc capability,
1435 * ieee80211_set_associated() will tell the driver */
1436 bss_conf->aid = aid;
1437 bss_conf->assoc_capability = capab_info;
ae5eb026 1438 ieee80211_set_associated(sdata, ifsta, changed);
f0706e82 1439
60f8b39c 1440 ieee80211_associated(sdata, ifsta);
f0706e82
JB		 1441}
1442
1443
f698d856 1444static int ieee80211_sta_join_ibss(struct ieee80211_sub_if_data *sdata,
a607268a 1445 struct ieee80211_if_sta *ifsta,
c2b13452 1446 struct ieee80211_bss *bss)
a607268a 1447{
f698d856 1448 struct ieee80211_local *local = sdata->local;
a607268a
BR		 1449 int res, rates, i, j;
1450 struct sk_buff *skb;
1451 struct ieee80211_mgmt *mgmt;
a607268a 1452 u8 *pos;
a607268a 1453 struct ieee80211_supported_band *sband;
507b06d0 1454 union iwreq_data wrqu;
a607268a 1455
e2ef12d3
RR		 1456 skb = dev_alloc_skb(local->hw.extra_tx_headroom + 400);
1457 if (!skb) {
1458 printk(KERN_DEBUG "%s: failed to allocate buffer for probe "
1459 "response\n", sdata->dev->name);
1460 return -ENOMEM;
1461 }
1462
a607268a
BR		 1463 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1464
1465 /* Remove possible STA entries from other IBSS networks. */
dc6676b7 1466 sta_info_flush_delayed(sdata);
a607268a
BR		 1467
1468 if (local->ops->reset_tsf) {
1469 /* Reset own TSF to allow time synchronization work. */
1470 local->ops->reset_tsf(local_to_hw(local));
1471 }
1472 memcpy(ifsta->bssid, bss->bssid, ETH_ALEN);
9d139c81 1473 res = ieee80211_if_config(sdata, IEEE80211_IFCC_BSSID);
a607268a
BR		 1474 if (res)
1475 return res;
1476
1477 local->hw.conf.beacon_int = bss->beacon_int >= 10 ? bss->beacon_int : 10;
1478
a607268a
BR		 1479 sdata->drop_unencrypted = bss->capability &
1480 WLAN_CAPABILITY_PRIVACY ? 1 : 0;
1481
f698d856 1482 res = ieee80211_set_freq(sdata, bss->freq);
a607268a 1483
be038b37
AK		 1484 if (res)
1485 return res;
a607268a 1486
9d139c81 1487 /* Build IBSS probe response */
a607268a 1488
e2ef12d3 1489 skb_reserve(skb, local->hw.extra_tx_headroom);
a607268a 1490
e2ef12d3
RR		 1491 mgmt = (struct ieee80211_mgmt *)
1492 skb_put(skb, 24 + sizeof(mgmt->u.beacon));
1493 memset(mgmt, 0, 24 + sizeof(mgmt->u.beacon));
1494 mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
1495 IEEE80211_STYPE_PROBE_RESP);
1496 memset(mgmt->da, 0xff, ETH_ALEN);
1497 memcpy(mgmt->sa, sdata->dev->dev_addr, ETH_ALEN);
1498 memcpy(mgmt->bssid, ifsta->bssid, ETH_ALEN);
1499 mgmt->u.beacon.beacon_int =
1500 cpu_to_le16(local->hw.conf.beacon_int);
1501 mgmt->u.beacon.timestamp = cpu_to_le64(bss->timestamp);
1502 mgmt->u.beacon.capab_info = cpu_to_le16(bss->capability);
a607268a 1503
e2ef12d3
RR		 1504 pos = skb_put(skb, 2 + ifsta->ssid_len);
1505 *pos++ = WLAN_EID_SSID;
1506 *pos++ = ifsta->ssid_len;
1507 memcpy(pos, ifsta->ssid, ifsta->ssid_len);
a607268a 1508
e2ef12d3
RR		 1509 rates = bss->supp_rates_len;
1510 if (rates > 8)
1511 rates = 8;
1512 pos = skb_put(skb, 2 + rates);
1513 *pos++ = WLAN_EID_SUPP_RATES;
1514 *pos++ = rates;
1515 memcpy(pos, bss->supp_rates, rates);
1516
1517 if (bss->band == IEEE80211_BAND_2GHZ) {
1518 pos = skb_put(skb, 2 + 1);
1519 *pos++ = WLAN_EID_DS_PARAMS;
1520 *pos++ = 1;
1521 *pos++ = ieee80211_frequency_to_channel(bss->freq);
1522 }
a607268a 1523
e2ef12d3
RR		 1524 pos = skb_put(skb, 2 + 2);
1525 *pos++ = WLAN_EID_IBSS_PARAMS;
1526 *pos++ = 2;
1527 /* FIX: set ATIM window based on scan results */
1528 *pos++ = 0;
1529 *pos++ = 0;
e039fa4a 1530
e2ef12d3
RR		 1531 if (bss->supp_rates_len > 8) {
1532 rates = bss->supp_rates_len - 8;
1533 pos = skb_put(skb, 2 + rates);
1534 *pos++ = WLAN_EID_EXT_SUPP_RATES;
1535 *pos++ = rates;
1536 memcpy(pos, &bss->supp_rates[8], rates);
9d139c81 1537 }
a607268a 1538
e2ef12d3
RR		 1539 ifsta->probe_resp = skb;
1540
1541 ieee80211_if_config(sdata, IEEE80211_IFCC_BEACON);
1542
1543
9d139c81
JB		 1544 rates = 0;
1545 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1546 for (i = 0; i < bss->supp_rates_len; i++) {
1547 int bitrate = (bss->supp_rates[i] & 0x7f) * 5;
1548 for (j = 0; j < sband->n_bitrates; j++)
1549 if (sband->bitrates[j].bitrate == bitrate)
1550 rates |= BIT(j);
a607268a 1551 }
9d139c81
JB		 1552 ifsta->supp_rates_bits[local->hw.conf.channel->band] = rates;
1553
b079ada7 1554 ieee80211_sta_def_wmm_params(sdata, bss);
a607268a 1555
48c2fc59 1556 ifsta->state = IEEE80211_STA_MLME_IBSS_JOINED;
a607268a
BR		 1557 mod_timer(&ifsta->timer, jiffies + IEEE80211_IBSS_MERGE_INTERVAL);
1558
4492bea6
EG		 1559 ieee80211_led_assoc(local, true);
1560
507b06d0
DW		 1561 memset(&wrqu, 0, sizeof(wrqu));
1562 memcpy(wrqu.ap_addr.sa_data, bss->bssid, ETH_ALEN);
f698d856 1563 wireless_send_event(sdata->dev, SIOCGIWAP, &wrqu, NULL);
a607268a
BR		 1564
1565 return res;
1566}
1567
98c8fccf
JB		 1568static void ieee80211_rx_bss_info(struct ieee80211_sub_if_data *sdata,
1569 struct ieee80211_mgmt *mgmt,
1570 size_t len,
1571 struct ieee80211_rx_status *rx_status,
1572 struct ieee802_11_elems *elems,
1573 bool beacon)
1574{
1575 struct ieee80211_local *local = sdata->local;
1576 int freq;
c2b13452 1577 struct ieee80211_bss *bss;
98c8fccf
JB		 1578 struct sta_info *sta;
1579 struct ieee80211_channel *channel;
1580 u64 beacon_timestamp, rx_timestamp;
1581 u64 supp_rates = 0;
1582 enum ieee80211_band band = rx_status->band;
98c8fccf
JB		 1583
1584 if (elems->ds_params && elems->ds_params_len == 1)
1585 freq = ieee80211_channel_to_frequency(elems->ds_params[0]);
1586 else
1587 freq = rx_status->freq;
1588
1589 channel = ieee80211_get_channel(local->hw.wiphy, freq);
1590
1591 if (!channel || channel->flags & IEEE80211_CHAN_DISABLED)
1592 return;
1593
05c914fe 1594 if (sdata->vif.type == NL80211_IFTYPE_ADHOC && elems->supp_rates &&
98c8fccf
JB		 1595 memcmp(mgmt->bssid, sdata->u.sta.bssid, ETH_ALEN) == 0) {
1596 supp_rates = ieee80211_sta_get_rates(local, elems, band);
1597
1598 rcu_read_lock();
1599
1600 sta = sta_info_get(local, mgmt->sa);
1601 if (sta) {
1602 u64 prev_rates;
1603
323ce79a 1604 prev_rates = sta->sta.supp_rates[band];
98c8fccf 1605 /* make sure mandatory rates are always added */
323ce79a 1606 sta->sta.supp_rates[band] = supp_rates |
96dd22ac 1607 ieee80211_mandatory_rates(local, band);
98c8fccf
JB		 1608
1609#ifdef CONFIG_MAC80211_IBSS_DEBUG
323ce79a 1610 if (sta->sta.supp_rates[band] != prev_rates)
98c8fccf 1611 printk(KERN_DEBUG "%s: updated supp_rates set "
0c68ae26 1612 "for %pM based on beacon info (0x%llx | "
98c8fccf 1613 "0x%llx -> 0x%llx)\n",
17741cdc 1614 sdata->dev->name,
0c68ae26 1615 sta->sta.addr,
98c8fccf
JB		 1616 (unsigned long long) prev_rates,
1617 (unsigned long long) supp_rates,
323ce79a 1618 (unsigned long long) sta->sta.supp_rates[band]);
98c8fccf
JB		 1619#endif
1620 } else {
ab1f5c0b 1621 ieee80211_ibss_add_sta(sdata, mgmt->bssid, mgmt->sa, supp_rates);
98c8fccf
JB		 1622 }
1623
1624 rcu_read_unlock();
1625 }
1626
1627 bss = ieee80211_bss_info_update(local, rx_status, mgmt, len, elems,
1628 freq, beacon);
1629 if (!bss)
1630 return;
1631
c481ec97
S		 1632 if (elems->ch_switch_elem && (elems->ch_switch_elem_len == 3) &&
1633 (memcmp(mgmt->bssid, sdata->u.sta.bssid, ETH_ALEN) == 0)) {
1634 struct ieee80211_channel_sw_ie *sw_elem =
1635 (struct ieee80211_channel_sw_ie *)elems->ch_switch_elem;
1636 ieee80211_process_chanswitch(sdata, sw_elem, bss);
1637 }
1638
98c8fccf
JB		 1639 /* was just updated in ieee80211_bss_info_update */
1640 beacon_timestamp = bss->timestamp;
1641
30b89b0f
JB		 1642 /*
1643 * In STA mode, the remaining parameters should not be overridden
1644 * by beacons because they're not necessarily accurate there.
1645 */
05c914fe 1646 if (sdata->vif.type != NL80211_IFTYPE_ADHOC &&
9859b81e 1647 bss->last_probe_resp && beacon) {
3e122be0 1648 ieee80211_rx_bss_put(local, bss);
30b89b0f
JB		 1649 return;
1650 }
1651
9d9bf77d 1652 /* check if we need to merge IBSS */
05c914fe 1653 if (sdata->vif.type == NL80211_IFTYPE_ADHOC && beacon &&
65f0e6a3 1654 (!(sdata->u.sta.flags & IEEE80211_STA_BSSID_SET)) &&
fba4a1e6 1655 bss->capability & WLAN_CAPABILITY_IBSS &&
9d9bf77d 1656 bss->freq == local->oper_channel->center_freq &&
ae6a44e3
EK		 1657 elems->ssid_len == sdata->u.sta.ssid_len &&
1658 memcmp(elems->ssid, sdata->u.sta.ssid,
1659 sdata->u.sta.ssid_len) == 0) {
9d9bf77d
BR		 1660 if (rx_status->flag & RX_FLAG_TSFT) {
1661 /* in order for correct IBSS merging we need mactime
1662 *
1663 * since mactime is defined as the time the first data
1664 * symbol of the frame hits the PHY, and the timestamp
1665 * of the beacon is defined as "the time that the data
1666 * symbol containing the first bit of the timestamp is
1667 * transmitted to the PHY plus the transmitting STA’s
1668 * delays through its local PHY from the MAC-PHY
1669 * interface to its interface with the WM"
1670 * (802.11 11.1.2) - equals the time this bit arrives at
1671 * the receiver - we have to take into account the
1672 * offset between the two.
1673 * e.g: at 1 MBit that means mactime is 192 usec earlier
1674 * (=24 bytes * 8 usecs/byte) than the beacon timestamp.
1675 */
0fb8ca45
JM		 1676 int rate;
1677 if (rx_status->flag & RX_FLAG_HT) {
1678 rate = 65; /* TODO: HT rates */
1679 } else {
1680 rate = local->hw.wiphy->bands[band]->
9d9bf77d 1681 bitrates[rx_status->rate_idx].bitrate;
0fb8ca45 1682 }
9d9bf77d
BR		 1683 rx_timestamp = rx_status->mactime + (24 * 8 * 10 / rate);
1684 } else if (local && local->ops && local->ops->get_tsf)
1685 /* second best option: get current TSF */
1686 rx_timestamp = local->ops->get_tsf(local_to_hw(local));
1687 else
1688 /* can't merge without knowing the TSF */
1689 rx_timestamp = -1LLU;
1690#ifdef CONFIG_MAC80211_IBSS_DEBUG
0c68ae26
JB		 1691 printk(KERN_DEBUG "RX beacon SA=%pM BSSID="
1692 "%pM TSF=0x%llx BCN=0x%llx diff=%lld @%lu\n",
1693 mgmt->sa, mgmt->bssid,
9d9bf77d
BR		 1694 (unsigned long long)rx_timestamp,
1695 (unsigned long long)beacon_timestamp,
1696 (unsigned long long)(rx_timestamp - beacon_timestamp),
1697 jiffies);
1698#endif /* CONFIG_MAC80211_IBSS_DEBUG */
1699 if (beacon_timestamp > rx_timestamp) {
576fdeae 1700#ifdef CONFIG_MAC80211_IBSS_DEBUG
f4ea83dd 1701 printk(KERN_DEBUG "%s: beacon TSF higher than "
0c68ae26
JB		 1702 "local TSF - IBSS merge with BSSID %pM\n",
1703 sdata->dev->name, mgmt->bssid);
fba4a1e6 1704#endif
f698d856 1705 ieee80211_sta_join_ibss(sdata, &sdata->u.sta, bss);
ab1f5c0b 1706 ieee80211_ibss_add_sta(sdata, mgmt->bssid, mgmt->sa, supp_rates);
9d9bf77d
BR		 1707 }
1708 }
1709
3e122be0 1710 ieee80211_rx_bss_put(local, bss);
f0706e82
JB		 1711}
1712
1713
f698d856 1714static void ieee80211_rx_mgmt_probe_resp(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1715 struct ieee80211_mgmt *mgmt,
1716 size_t len,
1717 struct ieee80211_rx_status *rx_status)
1718{
ae6a44e3
EK		 1719 size_t baselen;
1720 struct ieee802_11_elems elems;
9859b81e 1721 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
ae6a44e3 1722
8e7cdbb6
TW		 1723 if (memcmp(mgmt->da, sdata->dev->dev_addr, ETH_ALEN))
1724 return; /* ignore ProbeResp to foreign address */
1725
ae6a44e3
EK		 1726 baselen = (u8 *) mgmt->u.probe_resp.variable - (u8 *) mgmt;
1727 if (baselen > len)
1728 return;
1729
1730 ieee802_11_parse_elems(mgmt->u.probe_resp.variable, len - baselen,
1731 &elems);
1732
98c8fccf 1733 ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, false);
9859b81e
RR		 1734
1735 /* direct probe may be part of the association flow */
1736 if (test_and_clear_bit(IEEE80211_STA_REQ_DIRECT_PROBE,
1737 &ifsta->request)) {
1738 printk(KERN_DEBUG "%s direct probe responded\n",
1739 sdata->dev->name);
1740 ieee80211_authenticate(sdata, ifsta);
1741 }
f0706e82
JB		 1742}
1743
1744
f698d856 1745static void ieee80211_rx_mgmt_beacon(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1746 struct ieee80211_mgmt *mgmt,
1747 size_t len,
1748 struct ieee80211_rx_status *rx_status)
1749{
f0706e82 1750 struct ieee80211_if_sta *ifsta;
f0706e82
JB		 1751 size_t baselen;
1752 struct ieee802_11_elems elems;
f698d856 1753 struct ieee80211_local *local = sdata->local;
471b3efd 1754 u32 changed = 0;
a97b77b9 1755 bool erp_valid, directed_tim, is_mc = false;
7a5158ef 1756 u8 erp_value = 0;
f0706e82 1757
ae6a44e3
EK		 1758 /* Process beacon from the current BSS */
1759 baselen = (u8 *) mgmt->u.beacon.variable - (u8 *) mgmt;
1760 if (baselen > len)
1761 return;
1762
1763 ieee802_11_parse_elems(mgmt->u.beacon.variable, len - baselen, &elems);
1764
98c8fccf 1765 ieee80211_rx_bss_info(sdata, mgmt, len, rx_status, &elems, true);
f0706e82 1766
05c914fe 1767 if (sdata->vif.type != NL80211_IFTYPE_STATION)
f0706e82
JB		 1768 return;
1769 ifsta = &sdata->u.sta;
1770
d6f2da5b 1771 if (!(ifsta->flags & IEEE80211_STA_ASSOCIATED) ||
f0706e82
JB		 1772 memcmp(ifsta->bssid, mgmt->bssid, ETH_ALEN) != 0)
1773 return;
1774
c481ec97
S		 1775 if (rx_status->freq != local->hw.conf.channel->center_freq)
1776 return;
1777
fe3fa827
JB		 1778 ieee80211_sta_wmm_params(local, ifsta, elems.wmm_param,
1779 elems.wmm_param_len);
1780
a97b77b9
VN		 1781 if (!(local->hw.flags & IEEE80211_HW_NO_STACK_DYNAMIC_PS)) {
1782 directed_tim = check_tim(&elems, ifsta->aid, &is_mc);
1783
1784 if (directed_tim || is_mc) {
1785 if (local->hw.conf.flags && IEEE80211_CONF_PS) {
1786 local->hw.conf.flags &= ~IEEE80211_CONF_PS;
1787 ieee80211_hw_config(local,
1788 IEEE80211_CONF_CHANGE_PS);
1789 ieee80211_send_nullfunc(local, sdata, 0);
1790 }
1791 }
1792 }
7a5158ef
JB		 1793
1794 if (elems.erp_info && elems.erp_info_len >= 1) {
1795 erp_valid = true;
1796 erp_value = elems.erp_info[0];
1797 } else {
1798 erp_valid = false;
50c4afb9 1799 }
7a5158ef
JB		 1800 changed |= ieee80211_handle_bss_capability(sdata,
1801 le16_to_cpu(mgmt->u.beacon.capab_info),
1802 erp_valid, erp_value);
f0706e82 1803
d3c990fb 1804
ae5eb026
JB		 1805 if (elems.ht_cap_elem && elems.ht_info_elem && elems.wmm_param) {
1806 struct sta_info *sta;
1807 struct ieee80211_supported_band *sband;
1808 u16 ap_ht_cap_flags;
1809
1810 rcu_read_lock();
1811
1812 sta = sta_info_get(local, ifsta->bssid);
1813 if (!sta) {
1814 rcu_read_unlock();
1815 return;
1816 }
1817
1818 sband = local->hw.wiphy->bands[local->hw.conf.channel->band];
1819
1820 ieee80211_ht_cap_ie_to_sta_ht_cap(sband,
1821 elems.ht_cap_elem, &sta->sta.ht_cap);
1822
1823 ap_ht_cap_flags = sta->sta.ht_cap.cap;
1824
1825 rcu_read_unlock();
1826
1827 changed |= ieee80211_enable_ht(sdata, elems.ht_info_elem,
1828 ap_ht_cap_flags);
d3c990fb
RR		 1829 }
1830
3f2355cb
LR		 1831 if (elems.country_elem) {
1832 /* Note we are only reviewing this on beacons
1833 * for the BSSID we are associated to */
1834 regulatory_hint_11d(local->hw.wiphy,
1835 elems.country_elem, elems.country_elem_len);
1836 }
1837
471b3efd 1838 ieee80211_bss_info_change_notify(sdata, changed);
f0706e82
JB		 1839}
1840
1841
f698d856 1842static void ieee80211_rx_mgmt_probe_req(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1843 struct ieee80211_if_sta *ifsta,
1844 struct ieee80211_mgmt *mgmt,
504a71e4 1845 size_t len)
f0706e82 1846{
f698d856 1847 struct ieee80211_local *local = sdata->local;
f0706e82
JB		 1848 int tx_last_beacon;
1849 struct sk_buff *skb;
1850 struct ieee80211_mgmt *resp;
1851 u8 *pos, *end;
1852
05c914fe 1853 if (sdata->vif.type != NL80211_IFTYPE_ADHOC ||
48c2fc59 1854 ifsta->state != IEEE80211_STA_MLME_IBSS_JOINED ||
f0706e82
JB		 1855 len < 24 + 2 || !ifsta->probe_resp)
1856 return;
1857
1858 if (local->ops->tx_last_beacon)
1859 tx_last_beacon = local->ops->tx_last_beacon(local_to_hw(local));
1860 else
1861 tx_last_beacon = 1;
1862
1863#ifdef CONFIG_MAC80211_IBSS_DEBUG
0c68ae26
JB		 1864 printk(KERN_DEBUG "%s: RX ProbeReq SA=%pM DA=%pM BSSID=%pM"
1865 " (tx_last_beacon=%d)\n",
1866 sdata->dev->name, mgmt->sa, mgmt->da,
1867 mgmt->bssid, tx_last_beacon);
f0706e82
JB		 1868#endif /* CONFIG_MAC80211_IBSS_DEBUG */
1869
1870 if (!tx_last_beacon)
1871 return;
1872
1873 if (memcmp(mgmt->bssid, ifsta->bssid, ETH_ALEN) != 0 &&
1874 memcmp(mgmt->bssid, "\xff\xff\xff\xff\xff\xff", ETH_ALEN) != 0)
1875 return;
1876
1877 end = ((u8 *) mgmt) + len;
1878 pos = mgmt->u.probe_req.variable;
1879 if (pos[0] != WLAN_EID_SSID ||
1880 pos + 2 + pos[1] > end) {
f4ea83dd
JB		 1881#ifdef CONFIG_MAC80211_IBSS_DEBUG
1882 printk(KERN_DEBUG "%s: Invalid SSID IE in ProbeReq "
0c68ae26
JB		 1883 "from %pM\n",
1884 sdata->dev->name, mgmt->sa);
f4ea83dd 1885#endif
f0706e82
JB		 1886 return;
1887 }
1888 if (pos[1] != 0 &&
1889 (pos[1] != ifsta->ssid_len ||
1890 memcmp(pos + 2, ifsta->ssid, ifsta->ssid_len) != 0)) {
1891 /* Ignore ProbeReq for foreign SSID */
1892 return;
1893 }
1894
1895 /* Reply with ProbeResp */
0ec0b7ac 1896 skb = skb_copy(ifsta->probe_resp, GFP_KERNEL);
f0706e82
JB		 1897 if (!skb)
1898 return;
1899
1900 resp = (struct ieee80211_mgmt *) skb->data;
1901 memcpy(resp->da, mgmt->sa, ETH_ALEN);
1902#ifdef CONFIG_MAC80211_IBSS_DEBUG
0c68ae26
JB		 1903 printk(KERN_DEBUG "%s: Sending ProbeResp to %pM\n",
1904 sdata->dev->name, resp->da);
f0706e82 1905#endif /* CONFIG_MAC80211_IBSS_DEBUG */
e50db65c 1906 ieee80211_tx_skb(sdata, skb, 0);
f0706e82
JB		 1907}
1908
f698d856 1909void ieee80211_sta_rx_mgmt(struct ieee80211_sub_if_data *sdata, struct sk_buff *skb,
f0706e82
JB		 1910 struct ieee80211_rx_status *rx_status)
1911{
f698d856 1912 struct ieee80211_local *local = sdata->local;
f0706e82
JB		 1913 struct ieee80211_if_sta *ifsta;
1914 struct ieee80211_mgmt *mgmt;
1915 u16 fc;
1916
1917 if (skb->len < 24)
1918 goto fail;
1919
f0706e82
JB		 1920 ifsta = &sdata->u.sta;
1921
1922 mgmt = (struct ieee80211_mgmt *) skb->data;
1923 fc = le16_to_cpu(mgmt->frame_control);
1924
1925 switch (fc & IEEE80211_FCTL_STYPE) {
1926 case IEEE80211_STYPE_PROBE_REQ:
1927 case IEEE80211_STYPE_PROBE_RESP:
1928 case IEEE80211_STYPE_BEACON:
1929 memcpy(skb->cb, rx_status, sizeof(*rx_status));
1930 case IEEE80211_STYPE_AUTH:
1931 case IEEE80211_STYPE_ASSOC_RESP:
1932 case IEEE80211_STYPE_REASSOC_RESP:
1933 case IEEE80211_STYPE_DEAUTH:
1934 case IEEE80211_STYPE_DISASSOC:
1935 skb_queue_tail(&ifsta->skb_queue, skb);
1936 queue_work(local->hw.workqueue, &ifsta->work);
1937 return;
f0706e82
JB		 1938 }
1939
1940 fail:
1941 kfree_skb(skb);
1942}
1943
f698d856 1944static void ieee80211_sta_rx_queued_mgmt(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 1945 struct sk_buff *skb)
1946{
1947 struct ieee80211_rx_status *rx_status;
f0706e82
JB		 1948 struct ieee80211_if_sta *ifsta;
1949 struct ieee80211_mgmt *mgmt;
1950 u16 fc;
1951
f0706e82
JB		 1952 ifsta = &sdata->u.sta;
1953
1954 rx_status = (struct ieee80211_rx_status *) skb->cb;
1955 mgmt = (struct ieee80211_mgmt *) skb->data;
1956 fc = le16_to_cpu(mgmt->frame_control);
1957
1958 switch (fc & IEEE80211_FCTL_STYPE) {
1959 case IEEE80211_STYPE_PROBE_REQ:
504a71e4 1960 ieee80211_rx_mgmt_probe_req(sdata, ifsta, mgmt, skb->len);
f0706e82
JB		 1961 break;
1962 case IEEE80211_STYPE_PROBE_RESP:
f698d856 1963 ieee80211_rx_mgmt_probe_resp(sdata, mgmt, skb->len, rx_status);
f0706e82
JB		 1964 break;
1965 case IEEE80211_STYPE_BEACON:
f698d856 1966 ieee80211_rx_mgmt_beacon(sdata, mgmt, skb->len, rx_status);
f0706e82
JB		 1967 break;
1968 case IEEE80211_STYPE_AUTH:
f698d856 1969 ieee80211_rx_mgmt_auth(sdata, ifsta, mgmt, skb->len);
f0706e82
JB		 1970 break;
1971 case IEEE80211_STYPE_ASSOC_RESP:
471b3efd 1972 ieee80211_rx_mgmt_assoc_resp(sdata, ifsta, mgmt, skb->len, 0);
f0706e82
JB		 1973 break;
1974 case IEEE80211_STYPE_REASSOC_RESP:
471b3efd 1975 ieee80211_rx_mgmt_assoc_resp(sdata, ifsta, mgmt, skb->len, 1);
f0706e82
JB		 1976 break;
1977 case IEEE80211_STYPE_DEAUTH:
f698d856 1978 ieee80211_rx_mgmt_deauth(sdata, ifsta, mgmt, skb->len);
f0706e82
JB		 1979 break;
1980 case IEEE80211_STYPE_DISASSOC:
f698d856 1981 ieee80211_rx_mgmt_disassoc(sdata, ifsta, mgmt, skb->len);
f0706e82
JB		 1982 break;
1983 }
1984
1985 kfree_skb(skb);
1986}
1987
1988
f698d856 1989static int ieee80211_sta_active_ibss(struct ieee80211_sub_if_data *sdata)
f0706e82 1990{
f698d856 1991 struct ieee80211_local *local = sdata->local;
f0706e82
JB		 1992 int active = 0;
1993 struct sta_info *sta;
1994
d0709a65
JB		 1995 rcu_read_lock();
1996
1997 list_for_each_entry_rcu(sta, &local->sta_list, list) {
1998 if (sta->sdata == sdata &&
f0706e82
JB		 1999 time_after(sta->last_rx + IEEE80211_IBSS_MERGE_INTERVAL,
2000 jiffies)) {
2001 active++;
2002 break;
2003 }
2004 }
d0709a65
JB		 2005
2006 rcu_read_unlock();
f0706e82
JB		 2007
2008 return active;
2009}
2010
2011
f698d856 2012static void ieee80211_sta_merge_ibss(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 2013 struct ieee80211_if_sta *ifsta)
2014{
2015 mod_timer(&ifsta->timer, jiffies + IEEE80211_IBSS_MERGE_INTERVAL);
2016
f698d856
JBG		 2017 ieee80211_sta_expire(sdata, IEEE80211_IBSS_INACTIVITY_LIMIT);
2018 if (ieee80211_sta_active_ibss(sdata))
f0706e82
JB		 2019 return;
2020
137f9f46
AF		 2021 if ((sdata->u.sta.flags & IEEE80211_STA_BSSID_SET) &&
2022 (!(sdata->u.sta.flags & IEEE80211_STA_AUTO_CHANNEL_SEL)))
2023 return;
2024
f0706e82 2025 printk(KERN_DEBUG "%s: No active IBSS STAs - trying to scan for other "
f698d856 2026 "IBSS networks with same SSID (merge)\n", sdata->dev->name);
c2b13452 2027 ieee80211_request_scan(sdata, ifsta->ssid, ifsta->ssid_len);
f0706e82
JB		 2028}
2029
2030
9c6bd790 2031static void ieee80211_sta_timer(unsigned long data)
f0706e82 2032{
60f8b39c
JB		 2033 struct ieee80211_sub_if_data *sdata =
2034 (struct ieee80211_sub_if_data *) data;
2035 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2036 struct ieee80211_local *local = sdata->local;
f0706e82 2037
60f8b39c
JB		 2038 set_bit(IEEE80211_STA_REQ_RUN, &ifsta->request);
2039 queue_work(local->hw.workqueue, &ifsta->work);
f0706e82
JB		 2040}
2041
f698d856 2042static void ieee80211_sta_reset_auth(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 2043 struct ieee80211_if_sta *ifsta)
2044{
f698d856 2045 struct ieee80211_local *local = sdata->local;
f0706e82
JB		 2046
2047 if (local->ops->reset_tsf) {
2048 /* Reset own TSF to allow time synchronization work. */
2049 local->ops->reset_tsf(local_to_hw(local));
2050 }
2051
2052 ifsta->wmm_last_param_set = -1; /* allow any WMM update */
2053
2054
2055 if (ifsta->auth_algs & IEEE80211_AUTH_ALG_OPEN)
2056 ifsta->auth_alg = WLAN_AUTH_OPEN;
2057 else if (ifsta->auth_algs & IEEE80211_AUTH_ALG_SHARED_KEY)
2058 ifsta->auth_alg = WLAN_AUTH_SHARED_KEY;
2059 else if (ifsta->auth_algs & IEEE80211_AUTH_ALG_LEAP)
2060 ifsta->auth_alg = WLAN_AUTH_LEAP;
2061 else
2062 ifsta->auth_alg = WLAN_AUTH_OPEN;
f0706e82 2063 ifsta->auth_transaction = -1;
d6f2da5b 2064 ifsta->flags &= ~IEEE80211_STA_ASSOCIATED;
6042a3e3 2065 ifsta->assoc_scan_tries = 0;
9859b81e 2066 ifsta->direct_probe_tries = 0;
6042a3e3
RR		 2067 ifsta->auth_tries = 0;
2068 ifsta->assoc_tries = 0;
24e64622 2069 netif_tx_stop_all_queues(sdata->dev);
f698d856 2070 netif_carrier_off(sdata->dev);
f0706e82
JB		 2071}
2072
2073
f0706e82
JB		 2074static int ieee80211_sta_match_ssid(struct ieee80211_if_sta *ifsta,
2075 const char *ssid, int ssid_len)
2076{
2077 int tmp, hidden_ssid;
2078
48225709
MW		 2079 if (ssid_len == ifsta->ssid_len &&
2080 !memcmp(ifsta->ssid, ssid, ssid_len))
f0706e82
JB		 2081 return 1;
2082
d6f2da5b 2083 if (ifsta->flags & IEEE80211_STA_AUTO_BSSID_SEL)
f0706e82
JB		 2084 return 0;
2085
2086 hidden_ssid = 1;
2087 tmp = ssid_len;
2088 while (tmp--) {
2089 if (ssid[tmp] != '\0') {
2090 hidden_ssid = 0;
2091 break;
2092 }
2093 }
2094
cb3da8cc 2095 if (hidden_ssid && (ifsta->ssid_len == ssid_len || ssid_len == 0))
f0706e82
JB		 2096 return 1;
2097
2098 if (ssid_len == 1 && ssid[0] == ' ')
2099 return 1;
2100
2101 return 0;
2102}
2103
f698d856 2104static int ieee80211_sta_create_ibss(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 2105 struct ieee80211_if_sta *ifsta)
2106{
f698d856 2107 struct ieee80211_local *local = sdata->local;
c2b13452 2108 struct ieee80211_bss *bss;
8318d78a 2109 struct ieee80211_supported_band *sband;
f0706e82
JB		 2110 u8 bssid[ETH_ALEN], *pos;
2111 int i;
167ad6f7 2112 int ret;
f0706e82
JB		 2113
2114#if 0
2115 /* Easier testing, use fixed BSSID. */
2116 memset(bssid, 0xfe, ETH_ALEN);
2117#else
2118 /* Generate random, not broadcast, locally administered BSSID. Mix in
2119 * own MAC address to make sure that devices that do not have proper
2120 * random number generator get different BSSID. */
2121 get_random_bytes(bssid, ETH_ALEN);
2122 for (i = 0; i < ETH_ALEN; i++)
f698d856 2123 bssid[i] ^= sdata->dev->dev_addr[i];
f0706e82
JB		 2124 bssid[0] &= ~0x01;
2125 bssid[0] |= 0x02;
2126#endif
2127
0c68ae26
JB		 2128 printk(KERN_DEBUG "%s: Creating new IBSS network, BSSID %pM\n",
2129 sdata->dev->name, bssid);
f0706e82 2130
98c8fccf 2131 bss = ieee80211_rx_bss_add(local, bssid,
8318d78a 2132 local->hw.conf.channel->center_freq,
cffdd30d 2133 sdata->u.sta.ssid, sdata->u.sta.ssid_len);
f0706e82
JB		 2134 if (!bss)
2135 return -ENOMEM;
2136
8318d78a
JB		 2137 bss->band = local->hw.conf.channel->band;
2138 sband = local->hw.wiphy->bands[bss->band];
f0706e82
JB		 2139
2140 if (local->hw.conf.beacon_int == 0)
dc0ae30c 2141 local->hw.conf.beacon_int = 100;
f0706e82 2142 bss->beacon_int = local->hw.conf.beacon_int;
f0706e82
JB		 2143 bss->last_update = jiffies;
2144 bss->capability = WLAN_CAPABILITY_IBSS;
988c0f72
JB		 2145
2146 if (sdata->default_key)
f0706e82 2147 bss->capability |= WLAN_CAPABILITY_PRIVACY;
988c0f72 2148 else
f0706e82 2149 sdata->drop_unencrypted = 0;
988c0f72 2150
8318d78a 2151 bss->supp_rates_len = sband->n_bitrates;
f0706e82 2152 pos = bss->supp_rates;
8318d78a
JB		 2153 for (i = 0; i < sband->n_bitrates; i++) {
2154 int rate = sband->bitrates[i].bitrate;
f0706e82
JB		 2155 *pos++ = (u8) (rate / 5);
2156 }
2157
f698d856 2158 ret = ieee80211_sta_join_ibss(sdata, ifsta, bss);
3e122be0 2159 ieee80211_rx_bss_put(local, bss);
167ad6f7 2160 return ret;
f0706e82
JB		 2161}
2162
2163
f698d856 2164static int ieee80211_sta_find_ibss(struct ieee80211_sub_if_data *sdata,
f0706e82
JB		 2165 struct ieee80211_if_sta *ifsta)
2166{
f698d856 2167 struct ieee80211_local *local = sdata->local;
c2b13452 2168 struct ieee80211_bss *bss;
f0706e82
JB		 2169 int found = 0;
2170 u8 bssid[ETH_ALEN];
2171 int active_ibss;
2172
2173 if (ifsta->ssid_len == 0)
2174 return -EINVAL;
2175
f698d856 2176 active_ibss = ieee80211_sta_active_ibss(sdata);
f0706e82
JB		 2177#ifdef CONFIG_MAC80211_IBSS_DEBUG
2178 printk(KERN_DEBUG "%s: sta_find_ibss (active_ibss=%d)\n",
f698d856 2179 sdata->dev->name, active_ibss);
f0706e82 2180#endif /* CONFIG_MAC80211_IBSS_DEBUG */
c2b13452
JB		 2181 spin_lock_bh(&local->bss_lock);
2182 list_for_each_entry(bss, &local->bss_list, list) {
f0706e82
JB		 2183 if (ifsta->ssid_len != bss->ssid_len ||
2184 memcmp(ifsta->ssid, bss->ssid, bss->ssid_len) != 0
2185 || !(bss->capability & WLAN_CAPABILITY_IBSS))
2186 continue;
2187#ifdef CONFIG_MAC80211_IBSS_DEBUG
0c68ae26 2188 printk(KERN_DEBUG " bssid=%pM found\n", bss->bssid);
f0706e82
JB		 2189#endif /* CONFIG_MAC80211_IBSS_DEBUG */
2190 memcpy(bssid, bss->bssid, ETH_ALEN);
2191 found = 1;
2192 if (active_ibss || memcmp(bssid, ifsta->bssid, ETH_ALEN) != 0)
2193 break;
2194 }
c2b13452 2195 spin_unlock_bh(&local->bss_lock);
f0706e82
JB		 2196
2197#ifdef CONFIG_MAC80211_IBSS_DEBUG
6e43829b 2198 if (found)
0c68ae26
JB		 2199 printk(KERN_DEBUG " sta_find_ibss: selected %pM current "
2200 "%pM\n", bssid, ifsta->bssid);
f0706e82 2201#endif /* CONFIG_MAC80211_IBSS_DEBUG */
80693ceb
DD		 2202
2203 if (found && memcmp(ifsta->bssid, bssid, ETH_ALEN) != 0) {
167ad6f7 2204 int ret;
80693ceb
DD		 2205 int search_freq;
2206
2207 if (ifsta->flags & IEEE80211_STA_AUTO_CHANNEL_SEL)
2208 search_freq = bss->freq;
2209 else
2210 search_freq = local->hw.conf.channel->center_freq;
2211
f698d856 2212 bss = ieee80211_rx_bss_get(local, bssid, search_freq,
80693ceb
DD		 2213 ifsta->ssid, ifsta->ssid_len);
2214 if (!bss)
2215 goto dont_join;
2216
0c68ae26 2217 printk(KERN_DEBUG "%s: Selected IBSS BSSID %pM"
f0706e82 2218 " based on configured SSID\n",
0c68ae26 2219 sdata->dev->name, bssid);
f698d856 2220 ret = ieee80211_sta_join_ibss(sdata, ifsta, bss);
3e122be0 2221 ieee80211_rx_bss_put(local, bss);
167ad6f7 2222 return ret;
f0706e82 2223 }
80693ceb
DD		 2224
2225dont_join:
f0706e82
JB		 2226#ifdef CONFIG_MAC80211_IBSS_DEBUG
2227 printk(KERN_DEBUG " did not try to join ibss\n");
2228#endif /* CONFIG_MAC80211_IBSS_DEBUG */
2229
2230 /* Selected IBSS not found in current scan results - try to scan */
48c2fc59 2231 if (ifsta->state == IEEE80211_STA_MLME_IBSS_JOINED &&
f698d856 2232 !ieee80211_sta_active_ibss(sdata)) {
f0706e82
JB		 2233 mod_timer(&ifsta->timer, jiffies +
2234 IEEE80211_IBSS_MERGE_INTERVAL);
2235 } else if (time_after(jiffies, local->last_scan_completed +
2236 IEEE80211_SCAN_INTERVAL)) {
2237 printk(KERN_DEBUG "%s: Trigger new scan to find an IBSS to "
f698d856 2238 "join\n", sdata->dev->name);
c2b13452 2239 return ieee80211_request_scan(sdata, ifsta->ssid,
f0706e82 2240 ifsta->ssid_len);
48c2fc59 2241 } else if (ifsta->state != IEEE80211_STA_MLME_IBSS_JOINED) {
f0706e82
JB		 2242 int interval = IEEE80211_SCAN_INTERVAL;
2243
2244 if (time_after(jiffies, ifsta->ibss_join_req +
2245 IEEE80211_IBSS_JOIN_TIMEOUT)) {
d6f2da5b 2246 if ((ifsta->flags & IEEE80211_STA_CREATE_IBSS) &&
8318d78a
JB		 2247 (!(local->oper_channel->flags &
2248 IEEE80211_CHAN_NO_IBSS)))
f698d856 2249 return ieee80211_sta_create_ibss(sdata, ifsta);
d6f2da5b 2250 if (ifsta->flags & IEEE80211_STA_CREATE_IBSS) {
8318d78a 2251 printk(KERN_DEBUG "%s: IBSS not allowed on"
f698d856 2252 " %d MHz\n", sdata->dev->name,
8318d78a 2253 local->hw.conf.channel->center_freq);
f0706e82
JB		 2254 }
2255
2256 /* No IBSS found - decrease scan interval and continue
2257 * scanning. */
2258 interval = IEEE80211_SCAN_INTERVAL_SLOW;
2259 }
2260
48c2fc59 2261 ifsta->state = IEEE80211_STA_MLME_IBSS_SEARCH;
f0706e82
JB		 2262 mod_timer(&ifsta->timer, jiffies + interval);
2263 return 0;
2264 }
2265
2266 return 0;
2267}
2268
2269
9c6bd790
JB		 2270static int ieee80211_sta_config_auth(struct ieee80211_sub_if_data *sdata,
2271 struct ieee80211_if_sta *ifsta)
f0706e82 2272{
9c6bd790 2273 struct ieee80211_local *local = sdata->local;
c2b13452 2274 struct ieee80211_bss *bss, *selected = NULL;
9c6bd790 2275 int top_rssi = 0, freq;
f0706e82 2276
c2b13452 2277 spin_lock_bh(&local->bss_lock);
9c6bd790 2278 freq = local->oper_channel->center_freq;
c2b13452 2279 list_for_each_entry(bss, &local->bss_list, list) {
9c6bd790
JB		 2280 if (!(bss->capability & WLAN_CAPABILITY_ESS))
2281 continue;
f0706e82 2282
9c6bd790
JB		 2283 if ((ifsta->flags & (IEEE80211_STA_AUTO_SSID_SEL |
2284 IEEE80211_STA_AUTO_BSSID_SEL |
2285 IEEE80211_STA_AUTO_CHANNEL_SEL)) &&
2286 (!!(bss->capability & WLAN_CAPABILITY_PRIVACY) ^
2287 !!sdata->default_key))
2288 continue;
f0706e82 2289
9c6bd790
JB		 2290 if (!(ifsta->flags & IEEE80211_STA_AUTO_CHANNEL_SEL) &&
2291 bss->freq != freq)
2292 continue;
9d139c81 2293
9c6bd790
JB		 2294 if (!(ifsta->flags & IEEE80211_STA_AUTO_BSSID_SEL) &&
2295 memcmp(bss->bssid, ifsta->bssid, ETH_ALEN))
2296 continue;
f0706e82 2297
9c6bd790
JB		 2298 if (!(ifsta->flags & IEEE80211_STA_AUTO_SSID_SEL) &&
2299 !ieee80211_sta_match_ssid(ifsta, bss->ssid, bss->ssid_len))
2300 continue;
9d139c81 2301
9c6bd790
JB		 2302 if (!selected || top_rssi < bss->signal) {
2303 selected = bss;
2304 top_rssi = bss->signal;
2305 }
f0706e82 2306 }
9c6bd790
JB		 2307 if (selected)
2308 atomic_inc(&selected->users);
c2b13452 2309 spin_unlock_bh(&local->bss_lock);
9d139c81 2310
9c6bd790
JB		 2311 if (selected) {
2312 ieee80211_set_freq(sdata, selected->freq);
2313 if (!(ifsta->flags & IEEE80211_STA_SSID_SET))
2314 ieee80211_sta_set_ssid(sdata, selected->ssid,
2315 selected->ssid_len);
2316 ieee80211_sta_set_bssid(sdata, selected->bssid);
2317 ieee80211_sta_def_wmm_params(sdata, selected);
f0706e82 2318
9c6bd790
JB		 2319 /* Send out direct probe if no probe resp was received or
2320 * the one we have is outdated
2321 */
2322 if (!selected->last_probe_resp ||
2323 time_after(jiffies, selected->last_probe_resp
2324 + IEEE80211_SCAN_RESULT_EXPIRE))
2325 ifsta->state = IEEE80211_STA_MLME_DIRECT_PROBE;
2326 else
2327 ifsta->state = IEEE80211_STA_MLME_AUTHENTICATE;
f0706e82 2328
9c6bd790
JB		 2329 ieee80211_rx_bss_put(local, selected);
2330 ieee80211_sta_reset_auth(sdata, ifsta);
2331 return 0;
2332 } else {
2333 if (ifsta->assoc_scan_tries < IEEE80211_ASSOC_SCANS_MAX_TRIES) {
2334 ifsta->assoc_scan_tries++;
2335 if (ifsta->flags & IEEE80211_STA_AUTO_SSID_SEL)
c2b13452 2336 ieee80211_start_scan(sdata, NULL, 0);
9c6bd790 2337 else
c2b13452 2338 ieee80211_start_scan(sdata, ifsta->ssid,
9c6bd790
JB		 2339 ifsta->ssid_len);
2340 ifsta->state = IEEE80211_STA_MLME_AUTHENTICATE;
2341 set_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request);
2342 } else
2343 ifsta->state = IEEE80211_STA_MLME_DISABLED;
2344 }
2345 return -1;
2346}
2347
2348
2349static void ieee80211_sta_work(struct work_struct *work)
2350{
2351 struct ieee80211_sub_if_data *sdata =
2352 container_of(work, struct ieee80211_sub_if_data, u.sta.work);
2353 struct ieee80211_local *local = sdata->local;
2354 struct ieee80211_if_sta *ifsta;
2355 struct sk_buff *skb;
2356
2357 if (!netif_running(sdata->dev))
2358 return;
2359
c2b13452 2360 if (local->sw_scanning || local->hw_scanning)
9c6bd790
JB		 2361 return;
2362
05c914fe
JB		 2363 if (WARN_ON(sdata->vif.type != NL80211_IFTYPE_STATION &&
2364 sdata->vif.type != NL80211_IFTYPE_ADHOC))
9c6bd790 2365 return;
f0706e82
JB		 2366 ifsta = &sdata->u.sta;
2367
9c6bd790
JB		 2368 while ((skb = skb_dequeue(&ifsta->skb_queue)))
2369 ieee80211_sta_rx_queued_mgmt(sdata, skb);
2370
2371 if (ifsta->state != IEEE80211_STA_MLME_DIRECT_PROBE &&
2372 ifsta->state != IEEE80211_STA_MLME_AUTHENTICATE &&
2373 ifsta->state != IEEE80211_STA_MLME_ASSOCIATE &&
2374 test_and_clear_bit(IEEE80211_STA_REQ_SCAN, &ifsta->request)) {
c2b13452
JB		 2375 ieee80211_start_scan(sdata, ifsta->scan_ssid,
2376 ifsta->scan_ssid_len);
9c6bd790 2377 return;
f0706e82
JB		 2378 }
2379
9c6bd790
JB		 2380 if (test_and_clear_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request)) {
2381 if (ieee80211_sta_config_auth(sdata, ifsta))
2382 return;
2383 clear_bit(IEEE80211_STA_REQ_RUN, &ifsta->request);
2384 } else if (!test_and_clear_bit(IEEE80211_STA_REQ_RUN, &ifsta->request))
2385 return;
d6f2da5b 2386
9c6bd790
JB		 2387 switch (ifsta->state) {
2388 case IEEE80211_STA_MLME_DISABLED:
2389 break;
2390 case IEEE80211_STA_MLME_DIRECT_PROBE:
2391 ieee80211_direct_probe(sdata, ifsta);
2392 break;
2393 case IEEE80211_STA_MLME_AUTHENTICATE:
2394 ieee80211_authenticate(sdata, ifsta);
2395 break;
2396 case IEEE80211_STA_MLME_ASSOCIATE:
2397 ieee80211_associate(sdata, ifsta);
2398 break;
2399 case IEEE80211_STA_MLME_ASSOCIATED:
2400 ieee80211_associated(sdata, ifsta);
2401 break;
2402 case IEEE80211_STA_MLME_IBSS_SEARCH:
2403 ieee80211_sta_find_ibss(sdata, ifsta);
2404 break;
2405 case IEEE80211_STA_MLME_IBSS_JOINED:
2406 ieee80211_sta_merge_ibss(sdata, ifsta);
2407 break;
2408 default:
2409 WARN_ON(1);
2410 break;
2411 }
2412
2413 if (ieee80211_privacy_mismatch(sdata, ifsta)) {
2414 printk(KERN_DEBUG "%s: privacy configuration mismatch and "
2415 "mixed-cell disabled - disassociate\n", sdata->dev->name);
2416
2417 ieee80211_set_disassoc(sdata, ifsta, false, true,
2418 WLAN_REASON_UNSPECIFIED);
2419 }
f0706e82
JB		 2420}
2421
9c6bd790
JB		 2422static void ieee80211_restart_sta_timer(struct ieee80211_sub_if_data *sdata)
2423{
05c914fe 2424 if (sdata->vif.type == NL80211_IFTYPE_STATION)
9c6bd790
JB		 2425 queue_work(sdata->local->hw.workqueue,
2426 &sdata->u.sta.work);
2427}
f0706e82 2428
9c6bd790
JB		 2429/* interface setup */
2430void ieee80211_sta_setup_sdata(struct ieee80211_sub_if_data *sdata)
f0706e82 2431{
9c6bd790 2432 struct ieee80211_if_sta *ifsta;
988c0f72 2433
9c6bd790
JB		 2434 ifsta = &sdata->u.sta;
2435 INIT_WORK(&ifsta->work, ieee80211_sta_work);
c481ec97 2436 INIT_WORK(&ifsta->chswitch_work, ieee80211_chswitch_work);
9c6bd790 2437 setup_timer(&ifsta->timer, ieee80211_sta_timer,
c481ec97
S		 2438 (unsigned long) sdata);
2439 setup_timer(&ifsta->chswitch_timer, ieee80211_chswitch_timer,
9c6bd790
JB		 2440 (unsigned long) sdata);
2441 skb_queue_head_init(&ifsta->skb_queue);
2442
2443 ifsta->capab = WLAN_CAPABILITY_ESS;
2444 ifsta->auth_algs = IEEE80211_AUTH_ALG_OPEN |
2445 IEEE80211_AUTH_ALG_SHARED_KEY;
2446 ifsta->flags |= IEEE80211_STA_CREATE_IBSS |
2447 IEEE80211_STA_AUTO_BSSID_SEL |
2448 IEEE80211_STA_AUTO_CHANNEL_SEL;
2449 if (ieee80211_num_regular_queues(&sdata->local->hw) >= 4)
2450 ifsta->flags |= IEEE80211_STA_WMM_ENABLED;
f0706e82
JB		 2451}
2452
9c6bd790
JB		 2453/*
2454 * Add a new IBSS station, will also be called by the RX code when,
2455 * in IBSS mode, receiving a frame from a yet-unknown station, hence
2456 * must be callable in atomic context.
2457 */
f698d856 2458struct sta_info *ieee80211_ibss_add_sta(struct ieee80211_sub_if_data *sdata,
ab1f5c0b 2459 u8 *bssid,u8 *addr, u64 supp_rates)
f0706e82 2460{
f698d856 2461 struct ieee80211_local *local = sdata->local;
f0706e82 2462 struct sta_info *sta;
87291c02 2463 int band = local->hw.conf.channel->band;
f0706e82
JB		 2464
2465 /* TODO: Could consider removing the least recently used entry and
2466 * allow new one to be added. */
2467 if (local->num_sta >= IEEE80211_IBSS_MAX_STA_ENTRIES) {
2468 if (net_ratelimit()) {
2469 printk(KERN_DEBUG "%s: No room for a new IBSS STA "
0c68ae26 2470 "entry %pM\n", sdata->dev->name, addr);
f0706e82
JB		 2471 }
2472 return NULL;
2473 }
2474
1e188637 2475 if (compare_ether_addr(bssid, sdata->u.sta.bssid))
87291c02
VK		 2476 return NULL;
2477
f4ea83dd 2478#ifdef CONFIG_MAC80211_VERBOSE_DEBUG
0c68ae26
JB		 2479 printk(KERN_DEBUG "%s: Adding new IBSS station %pM (dev=%s)\n",
2480 wiphy_name(local->hw.wiphy), addr, sdata->dev->name);
f4ea83dd 2481#endif
f0706e82 2482
73651ee6
JB		 2483 sta = sta_info_alloc(sdata, addr, GFP_ATOMIC);
2484 if (!sta)
f0706e82
JB		 2485 return NULL;
2486
07346f81 2487 set_sta_flags(sta, WLAN_STA_AUTHORIZED);
238814fd 2488
8e1535d5 2489 /* make sure mandatory rates are always added */
323ce79a 2490 sta->sta.supp_rates[band] = supp_rates |
96dd22ac 2491 ieee80211_mandatory_rates(local, band);
f0706e82 2492
4b7679a5 2493 rate_control_rate_init(sta);
f0706e82 2494
93e5deb1 2495 if (sta_info_insert(sta))
73651ee6 2496 return NULL;
73651ee6 2497
d0709a65 2498 return sta;
f0706e82
JB		 2499}
2500
9c6bd790
JB		 2501/* configuration hooks */
2502void ieee80211_sta_req_auth(struct ieee80211_sub_if_data *sdata,
2503 struct ieee80211_if_sta *ifsta)
60f8b39c
JB		 2504{
2505 struct ieee80211_local *local = sdata->local;
60f8b39c 2506
05c914fe 2507 if (sdata->vif.type != NL80211_IFTYPE_STATION)
9c6bd790 2508 return;
60f8b39c 2509
9c6bd790
JB		 2510 if ((ifsta->flags & (IEEE80211_STA_BSSID_SET |
2511 IEEE80211_STA_AUTO_BSSID_SEL)) &&
2512 (ifsta->flags & (IEEE80211_STA_SSID_SET |
2513 IEEE80211_STA_AUTO_SSID_SEL))) {
60f8b39c 2514
9c6bd790
JB		 2515 if (ifsta->state == IEEE80211_STA_MLME_ASSOCIATED)
2516 ieee80211_set_disassoc(sdata, ifsta, true, true,
2517 WLAN_REASON_DEAUTH_LEAVING);
60f8b39c 2518
9c6bd790
JB		 2519 set_bit(IEEE80211_STA_REQ_AUTH, &ifsta->request);
2520 queue_work(local->hw.workqueue, &ifsta->work);
2521 }
2522}
60f8b39c 2523
9c6bd790
JB		 2524int ieee80211_sta_set_ssid(struct ieee80211_sub_if_data *sdata, char *ssid, size_t len)
2525{
2526 struct ieee80211_if_sta *ifsta;
60f8b39c 2527
9c6bd790
JB		 2528 if (len > IEEE80211_MAX_SSID_LEN)
2529 return -EINVAL;
2530
2531 ifsta = &sdata->u.sta;
2532
2533 if (ifsta->ssid_len != len || memcmp(ifsta->ssid, ssid, len) != 0) {
2534 memset(ifsta->ssid, 0, sizeof(ifsta->ssid));
2535 memcpy(ifsta->ssid, ssid, len);
2536 ifsta->ssid_len = len;
2537 ifsta->flags &= ~IEEE80211_STA_PREV_BSSID_SET;
60f8b39c 2538 }
60f8b39c 2539
9c6bd790
JB		 2540 if (len)
2541 ifsta->flags |= IEEE80211_STA_SSID_SET;
2542 else
2543 ifsta->flags &= ~IEEE80211_STA_SSID_SET;
60f8b39c 2544
05c914fe 2545 if (sdata->vif.type == NL80211_IFTYPE_ADHOC &&
9c6bd790
JB		 2546 !(ifsta->flags & IEEE80211_STA_BSSID_SET)) {
2547 ifsta->ibss_join_req = jiffies;
2548 ifsta->state = IEEE80211_STA_MLME_IBSS_SEARCH;
2549 return ieee80211_sta_find_ibss(sdata, ifsta);
2550 }
2551
2552 return 0;
2553}
2554
2555int ieee80211_sta_get_ssid(struct ieee80211_sub_if_data *sdata, char *ssid, size_t *len)
2556{
2557 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2558 memcpy(ssid, ifsta->ssid, ifsta->ssid_len);
2559 *len = ifsta->ssid_len;
2560 return 0;
2561}
2562
2563int ieee80211_sta_set_bssid(struct ieee80211_sub_if_data *sdata, u8 *bssid)
2564{
2565 struct ieee80211_if_sta *ifsta;
2566 int res;
0efcdfd6 2567 bool valid;
9c6bd790
JB		 2568
2569 ifsta = &sdata->u.sta;
0efcdfd6 2570 valid = is_valid_ether_addr(bssid);
9c6bd790
JB		 2571
2572 if (memcmp(ifsta->bssid, bssid, ETH_ALEN) != 0) {
0efcdfd6
AF		 2573 if(valid)
2574 memcpy(ifsta->bssid, bssid, ETH_ALEN);
2575 else
2576 memset(ifsta->bssid, 0, ETH_ALEN);
9c6bd790
JB		 2577 res = 0;
2578 /*
2579 * Hack! See also ieee80211_sta_set_ssid.
60f8b39c 2580 */
9c6bd790
JB		 2581 if (netif_running(sdata->dev))
2582 res = ieee80211_if_config(sdata, IEEE80211_IFCC_BSSID);
2583 if (res) {
2584 printk(KERN_DEBUG "%s: Failed to config new BSSID to "
2585 "the low-level driver\n", sdata->dev->name);
2586 return res;
2587 }
2588 }
60f8b39c 2589
0efcdfd6 2590 if (valid)
9c6bd790
JB		 2591 ifsta->flags |= IEEE80211_STA_BSSID_SET;
2592 else
2593 ifsta->flags &= ~IEEE80211_STA_BSSID_SET;
2594
2595 return 0;
2596}
2597
2598int ieee80211_sta_set_extra_ie(struct ieee80211_sub_if_data *sdata, char *ie, size_t len)
2599{
2600 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2601
2602 kfree(ifsta->extra_ie);
2603 if (len == 0) {
2604 ifsta->extra_ie = NULL;
2605 ifsta->extra_ie_len = 0;
60f8b39c 2606 return 0;
60f8b39c 2607 }
9c6bd790
JB		 2608 ifsta->extra_ie = kmalloc(len, GFP_KERNEL);
2609 if (!ifsta->extra_ie) {
2610 ifsta->extra_ie_len = 0;
2611 return -ENOMEM;
2612 }
2613 memcpy(ifsta->extra_ie, ie, len);
2614 ifsta->extra_ie_len = len;
2615 return 0;
60f8b39c
JB		 2616}
2617
f698d856 2618int ieee80211_sta_deauthenticate(struct ieee80211_sub_if_data *sdata, u16 reason)
f0706e82 2619{
f0706e82
JB		 2620 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2621
f4ea83dd 2622 printk(KERN_DEBUG "%s: deauthenticating by local choice (reason=%d)\n",
f698d856 2623 sdata->dev->name, reason);
f0706e82 2624
05c914fe
JB		 2625 if (sdata->vif.type != NL80211_IFTYPE_STATION &&
2626 sdata->vif.type != NL80211_IFTYPE_ADHOC)
f0706e82
JB		 2627 return -EINVAL;
2628
aa458d17 2629 ieee80211_set_disassoc(sdata, ifsta, true, true, reason);
f0706e82
JB		 2630 return 0;
2631}
2632
f698d856 2633int ieee80211_sta_disassociate(struct ieee80211_sub_if_data *sdata, u16 reason)
f0706e82 2634{
f0706e82
JB		 2635 struct ieee80211_if_sta *ifsta = &sdata->u.sta;
2636
f4ea83dd 2637 printk(KERN_DEBUG "%s: disassociating by local choice (reason=%d)\n",
f698d856 2638 sdata->dev->name, reason);
f0706e82 2639
05c914fe 2640 if (sdata->vif.type != NL80211_IFTYPE_STATION)
f0706e82
JB		 2641 return -EINVAL;
2642
d6f2da5b 2643 if (!(ifsta->flags & IEEE80211_STA_ASSOCIATED))
f0706e82
JB		 2644 return -1;
2645
aa458d17 2646 ieee80211_set_disassoc(sdata, ifsta, false, true, reason);
f0706e82
JB		 2647 return 0;
2648}
84363e6e 2649
9c6bd790
JB		 2650/* scan finished notification */
2651void ieee80211_mlme_notify_scan_completed(struct ieee80211_local *local)
2652{
2653 struct ieee80211_sub_if_data *sdata = local->scan_sdata;
2654 struct ieee80211_if_sta *ifsta;
2655
05c914fe 2656 if (sdata && sdata->vif.type == NL80211_IFTYPE_ADHOC) {
9c6bd790
JB		 2657 ifsta = &sdata->u.sta;
2658 if (!(ifsta->flags & IEEE80211_STA_BSSID_SET) ||
2659 (!(ifsta->state == IEEE80211_STA_MLME_IBSS_JOINED) &&
2660 !ieee80211_sta_active_ibss(sdata)))
2661 ieee80211_sta_find_ibss(sdata, ifsta);
2662 }
2663
2664 /* Restart STA timers */
2665 rcu_read_lock();
2666 list_for_each_entry_rcu(sdata, &local->interfaces, list)
2667 ieee80211_restart_sta_timer(sdata);
2668 rcu_read_unlock();
2669}
520eb820
KV		 2670
2671void ieee80211_dynamic_ps_disable_work(struct work_struct *work)
2672{
2673 struct ieee80211_local *local =
2674 container_of(work, struct ieee80211_local,
2675 dynamic_ps_disable_work);
2676
2677 if (local->hw.conf.flags & IEEE80211_CONF_PS) {
2678 local->hw.conf.flags &= ~IEEE80211_CONF_PS;
2679 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
2680 }
2681
2682 ieee80211_wake_queues_by_reason(&local->hw,
2683 IEEE80211_QUEUE_STOP_REASON_PS);
2684}
2685
2686void ieee80211_dynamic_ps_enable_work(struct work_struct *work)
2687{
2688 struct ieee80211_local *local =
2689 container_of(work, struct ieee80211_local,
2690 dynamic_ps_enable_work);
a97b77b9 2691 struct ieee80211_sub_if_data *sdata = local->scan_sdata;
520eb820
KV		 2692
2693 if (local->hw.conf.flags & IEEE80211_CONF_PS)
2694 return;
2695
a97b77b9 2696 ieee80211_send_nullfunc(local, sdata, 1);
520eb820
KV		 2697 local->hw.conf.flags |= IEEE80211_CONF_PS;
2698
2699 ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
2700}
2701
2702void ieee80211_dynamic_ps_timer(unsigned long data)
2703{
2704 struct ieee80211_local *local = (void *) data;
2705
2706 queue_work(local->hw.workqueue, &local->dynamic_ps_enable_work);
2707}
Linux kernel - Deliverables
This page took 0.586129 seconds and 5 git commands to generate.